Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
github.com/robrotheram/gogallery
GoGallery as the name suggests is a web gallery software with a golang backend. It is driven of a filebase backend. ie collections/albums are folders with photos. The inspiration for this gallery is to provide a some of the functionaities of my old gallery cms Koken which has had no updates in over a year+ and had gone silent. NOTE that this is not a replacement for Koken just the very limited features I was using.
The application uses react frontend and a seperate react dashboard that supports upload and managing photos in collections.
Demo at https://gallery.exceptionerror.io
Makefile to the rescue
make
make build-frontend
make build-dashboard
make build-server
Edit the config and change the name basepath and base folder that is used for scanning images
Gogallery on first run will autocreate a admin accound with username admin
and a 8 character autogenerated password which you will find in the log. Once loged in you can go to settings and user to set it
Dashboard url %GALLERY_PATH/dashboard
If you forget the admin password for any reason you can use the gogallery --reset-admin
which will recrate the admin username and password
Config can be also edited via environmental variables
GLLRY_SERVER_PORT
GLLRY_SERVER_WORKERS
GLLRY_DATABASE_BASEURL
GLLRY_GALLERY_NAME
GLLRY_GALLERY_BASEPATH
GLLRY_GALLERY_URL
GALLRY_GALLERY_THEME
GALLRY_GALLERY_PICTUREBLACKLIST
GALLRY_GALLERY_ALBUMBLACKLIST
GLLRY_ABOUT_INSTAGRAM
GLLRY_ABOUT_TWITTER
GLLRY_ABOUT_EMAIL
GLLRY_ABOUT_WEBSITE
GLLRY_ABOUT_DESCRIPTION
GLLRY_ABOUT_PHOTOGRAPHER
GLLRY_ABOUT_BACKGROUNDPHOTO
GLLRY_ABOUT_PROFILEPHOTO
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Please make sure to update tests as appropriate.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.