Skip to content

[stable34] Fix npm audit - #5041

Open
nextcloud-command wants to merge 1 commit into
stable34from
automated/noid/stable34-fix-npm-audit
Open

nextcloud-command wants to merge 1 commit into
stable34from
automated/noid/stable34-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Aug 23, 2026 •

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 3 of the total 57 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vue/server-renderer #

  • @vue/server-renderer: XSS via missing CR in attribute-name blacklist
  • Severity: high (CVSS 7.2)
  • Reference: GHSA-g2v6-rqmx-r4w6
  • Affected versions: <=3.5.41
  • Package usage:
    • node_modules/@vue/server-renderer

cypress-vite #

  • Caused by vulnerable dependency:
  • Affected versions: 1.4.0 - 1.9.1
  • Package usage:
    • node_modules/cypress-vite

vue #

  • Caused by vulnerable dependency:
  • Affected versions: 3.2.13 - 3.5.41
  • Package usage:
    • node_modules/vue

@nextcloud-command nextcloud-command added 3. to review Items that need to be reviewed dependencies labels Aug 23, 2026
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch 2 times, most recently from 634e2ae to 0f6ab9f Compare September 6, 2026 07:33
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch from 0f6ab9f to a402397 Compare September 13, 2026 08:01
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch from a402397 to 2ed76ea Compare September 20, 2026 08:19
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch from 2ed76ea to 41f28f9 Compare September 27, 2026 08:57
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch from 41f28f9 to 2251307 Compare October 4, 2026 09:28
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch from 2251307 to d40a993 Compare October 11, 2026 10:00
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch from d40a993 to df67aad Compare October 18, 2026 07:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Items that need to be reviewed dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant