Skip to content

[stable33] Fix npm audit - #1307

Open
nextcloud-command wants to merge 1 commit into
stable33from
automated/noid/stable33-fix-npm-audit
Open

[stable33] Fix npm audit#1307
nextcloud-command wants to merge 1 commit into
stable33from
automated/noid/stable33-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Sep 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Audit report

This audit fix resolves 2 of the total 49 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vue/server-renderer #

  • @vue/server-renderer: XSS via missing CR in attribute-name blacklist
  • Severity: high (CVSS 7.2)
  • Reference: GHSA-g2v6-rqmx-r4w6
  • Affected versions: <=3.5.41
  • Package usage:
    • node_modules/@vue/server-renderer

vue #

  • Caused by vulnerable dependency:
  • Affected versions: 3.2.13 - 3.5.41
  • Package usage:
    • node_modules/vue

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Sep 20, 2026
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable33-fix-npm-audit branch from 8effb6c to 5b7b71e Compare October 4, 2026 09:28
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable33-fix-npm-audit branch from 5b7b71e to d306904 Compare October 11, 2026 10:03
@nextcloud-command
fix(deps): Fix npm audit
3e7f0f2 
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable33-fix-npm-audit branch from d306904 to 3e7f0f2 Compare October 18, 2026 07:58

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@juliusknorr juliusknorr juliusknorr approved these changes
@benjaminfrueh benjaminfrueh Awaiting requested review from benjaminfrueh benjaminfrueh is a code owner

Assignees

No one assigned

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@nextcloud-command @juliusknorr