Skip to content

[stable32] Fix npm audit - #3013

Closed
nextcloud-command wants to merge 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit
Closed

nextcloud-command wants to merge 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Oct 4, 2026 •

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 3 of the total 33 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@nextcloud/cypress #

  • Caused by vulnerable dependency:
  • Affected versions:
  • Package usage:
    • node_modules/@nextcloud/cypress

@vitest/coverage-v8 #

  • Caused by vulnerable dependency:
  • Affected versions: 2.1.0-beta.1 - 4.1.10
  • Package usage:
    • node_modules/@vitest/coverage-v8

vitest #

  • Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
  • Severity: moderate (CVSS 5.9)
  • Reference: GHSA-82fw-gwwq-j7x9
  • Affected versions: 2.1.0-beta.1 - 4.1.10
  • Package usage:
    • node_modules/vitest

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Oct 4, 2026
@cypress

cypress Bot commented Oct 4, 2026 •

Copy link
Copy Markdown

Activity    Run #4124

Run Properties:  status check passed Passed #4124  •  git commit 5d9ffd4293: [stable32] Fix npm audit
Project Activity
Branch Review automated/noid/stable32-fix-npm-audit
Run status status check passed Passed #4124
Run duration 02m 04s
Commit git commit 5d9ffd4293: [stable32] Fix npm audit
Committer Nextcloud Command Bot
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 1
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 9
View all changes introduced in this branch ↗︎

@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch 2 times, most recently from 52ff4b3 to c3feae7 Compare October 18, 2026 07:52
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from c3feae7 to b582486 Compare October 25, 2026 07:59
@come-nc come-nc closed this Oct 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants