avo
Avo is an admin panel framework for Ruby on Rails. Build admins, internal tools, dashboards and back offices in plain Ruby inside your own Rails app. Your team and your AI agents work with the same data under the same rules: one set of Pundit policies governs the UI, the AI chat, the MCP server, the API and the CLI. The core is free and open source; paid add-ons are priced per app with unlimited users.
Security Advisories for avo in rubygems
Moderate
4 months ago
Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy
rubygems
avo
Critical
5 months ago
Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation
rubygems
avo
High
7 months ago
Avo: Broken Access Control Through Unauthorized Execution of Arbitrary Action Classes Across Resources
rubygems
avo
High
almost 3 years ago
avo vulnerable to stored cross-site scripting (XSS) in key_value field
rubygems
avo
High
over 3 years ago
avo vulnerable to Stored XSS (Cross Site Scripting) in html content based fields
rubygems
avo