[susnux]

No description provided.

[github-actions]

Audit report

This audit fix resolves 3 of the total 85 vulnerabilities found in your project.

Updated vulnerable dependencies

• @nextcloud/cypress
• dompurify
• moment

Fixed vulnerabilities

@nextcloud/cypress #

• Caused by vulnerable dependency:
  • cypress
• Affected versions:
• Package usage:
  • node_modules/@nextcloud/cypress

dompurify #

• DOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DOM XSS
• Severity: low
• Reference: GHSA-p98j-92pf-mc4p
• Affected versions: 3.4.13 - 3.4.15
• Package usage:
  • node_modules/dompurify

moment #

• moment vulnerable to Path Traversal via crafted non-string locale name
• Severity: moderate (CVSS 5.9)
• Reference: GHSA-4p3w-j4w9-5jqw
• Affected versions: 2.29.2 - 2.30.1
• Package usage:
  • node_modules/moment

Updated dependencies

Details

[]

[github-actions]

This pull request has been automatically locked because it has been closed for more than 7 days. As we do not monitor merged or closed pull requests, we are locking this pull request to prevent further comments from getting lost in the noise.
If you discovered any issues with this pull request, please open a new issue instead. In case you want to discuss this pull request or have further questions, please use our forum: https://help.nextcloud.com