Skip to content

[stable32] Fix npm audit - #3013

Open
nextcloud-command wants to merge 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit
Open

nextcloud-command wants to merge 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Oct 4, 2026 •

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 4 of the total 51 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@nextcloud/cypress #

  • Caused by vulnerable dependency:
  • Affected versions:
  • Package usage:
    • node_modules/@nextcloud/cypress

@vitest/coverage-v8 #

  • Caused by vulnerable dependency:
  • Affected versions: 2.1.0-beta.1 - 4.1.10
  • Package usage:
    • node_modules/@vitest/coverage-v8

cypress-vite #

  • Caused by vulnerable dependency:
  • Affected versions: 1.4.0 - 1.9.1
  • Package usage:
    • node_modules/cypress-vite

vitest #

  • Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
  • Severity: moderate (CVSS 5.9)
  • Reference: GHSA-82fw-gwwq-j7x9
  • Affected versions: 2.1.0-beta.1 - 4.1.10
  • Package usage:
    • node_modules/vitest

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Oct 4, 2026
@cypress

cypress Bot commented Oct 4, 2026 •

Copy link
Copy Markdown

Activity    Run #4121

Run Properties:  status check passed Passed #4121  •  git commit 57dc660cb5: [stable32] Fix npm audit
Project Activity
Branch Review automated/noid/stable32-fix-npm-audit
Run status status check passed Passed #4121
Run duration 02m 16s
Commit git commit 57dc660cb5: [stable32] Fix npm audit
Committer Nextcloud Command Bot
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 1
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 9
View all changes introduced in this branch ↗︎

@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 852d819 to 52ff4b3 Compare October 11, 2026 09:59
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 52ff4b3 to c3feae7 Compare October 18, 2026 07:52

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant