Skip to content

[master] Fix npm audit - #1034

Open
nextcloud-command wants to merge 1 commit into
masterfrom
automated/noid/master-fix-npm-audit
Open

nextcloud-command wants to merge 1 commit into
masterfrom
automated/noid/master-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Sep 6, 2026 •

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 3 of the total 16 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vue/server-renderer #

  • @vue/server-renderer: XSS via missing CR in attribute-name blacklist
  • Severity: high (CVSS 7.2)
  • Reference: GHSA-g2v6-rqmx-r4w6
  • Affected versions: <=3.5.41
  • Package usage:
    • node_modules/@vue/server-renderer

vite #

  • launch-editor: escapeCmdArgs() omits % escaping on Windows
  • Severity: moderate
  • Reference: GHSA-698v-4r3x-3vcv
  • Affected versions: 7.0.0 - 7.3.6
  • Package usage:
    • node_modules/vite

vue #

  • Caused by vulnerable dependency:
  • Affected versions: 3.2.13 - 3.5.41
  • Package usage:
    • node_modules/vue

@nextcloud-command
nextcloud-command force-pushed the automated/noid/master-fix-npm-audit branch from 7392f1f to 7e71f02 Compare September 13, 2026 08:01
@nextcloud-command
nextcloud-command force-pushed the automated/noid/master-fix-npm-audit branch from 7e71f02 to 7e5bea8 Compare September 20, 2026 08:21
@nextcloud-command
nextcloud-command force-pushed the automated/noid/master-fix-npm-audit branch from 7e5bea8 to d6f2e10 Compare September 27, 2026 08:59
@nextcloud-command
nextcloud-command force-pushed the automated/noid/master-fix-npm-audit branch from d6f2e10 to a196d16 Compare October 4, 2026 09:26
@nextcloud-command
nextcloud-command force-pushed the automated/noid/master-fix-npm-audit branch 2 times, most recently from e6dc7d9 to 0474a91 Compare October 18, 2026 07:56
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/master-fix-npm-audit branch from 0474a91 to ae1228c Compare October 25, 2026 08:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant