Skip to content

[stable1.0] Fix npm audit - #3021

Open
nextcloud-command wants to merge 1 commit into
stable1.0from
automated/noid/stable1.0-fix-npm-audit
Open

nextcloud-command wants to merge 1 commit into
stable1.0from
automated/noid/stable1.0-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Sep 20, 2026 •

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 2 of the total 81 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@nextcloud/cypress #

  • Caused by vulnerable dependency:
  • Affected versions:
  • Package usage:
    • node_modules/@nextcloud/cypress

dompurify #

  • DOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DOM XSS
  • Severity: low
  • Reference: GHSA-p98j-92pf-mc4p
  • Affected versions: <=3.4.15
  • Package usage:
    • node_modules/dompurify

@nextcloud-command nextcloud-command added 3. to review Waiting for reviews dependencies Pull requests that update a dependency file labels Sep 20, 2026
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable1.0-fix-npm-audit branch from 4ef2ded to 63721c3 Compare September 27, 2026 08:55
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable1.0-fix-npm-audit branch from 63721c3 to d26b093 Compare October 4, 2026 09:19
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable1.0-fix-npm-audit branch from d26b093 to 190da83 Compare October 11, 2026 09:57
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable1.0-fix-npm-audit branch from 190da83 to 335354f Compare October 14, 2026 08:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant