[nextcloud-command]

Audit report

This audit fix resolves 4 of the total 64 vulnerabilities found in your project.

Updated dependencies

• @nextcloud/cypress
• @vitest/coverage-v8
• happy-dom
• vitest

Fixed vulnerabilities

@nextcloud/cypress #

• Caused by vulnerable dependency:
  • cypress
• Affected versions:
• Package usage:
  • node_modules/@nextcloud/cypress

@vitest/coverage-v8 #

• Caused by vulnerable dependency:
  • vitest
• Affected versions: 2.1.0-beta.1 - 4.1.10
• Package usage:
  • node_modules/@vitest/coverage-v8

happy-dom #

• Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution
• Severity: high (CVSS 8.8)
• Reference: GHSA-834v-8h66-3h79
• Affected versions: <=21.0.3
• Package usage:
  • node_modules/happy-dom

vitest #

• Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
• Severity: moderate (CVSS 5.9)
• Reference: GHSA-82fw-gwwq-j7x9
• Affected versions: 2.1.0-beta.1 - 4.1.10
• Package usage:
  • node_modules/vitest

[cypress]

Activity    Run #4127

Run Properties:   Failed #4127  •  6ae78338e7: [stable32] Fix npm audit

Project	Activity
Branch Review	automated/noid/stable32-fix-npm-audit
Run status	Failed #4127
Run duration	02m 08s
Commit	6ae78338e7: [stable32] Fix npm audit
Committer	Nextcloud Command Bot
View all properties for this run ↗︎

---

Test results
Failures	2
Flaky	0
Pending	1
Skipped	0
Passing	7
View all changes introduced in this branch ↗︎

---

Tests for review

  cypress/e2e/sidebar.cy.ts • 2 failed tests • Run E2E

View Output

Test		Artifacts
Check activity listing in the sidebar > Has share activity		Test Replay Screenshots
Check activity listing in the sidebar > Has tag activity		Test Replay Screenshots