Skip to content

[master] Fix npm audit - #3409

Open
nextcloud-command wants to merge 1 commit into
masterfrom
automated/noid/master-fix-npm-audit
Open

[master] Fix npm audit#3409
nextcloud-command wants to merge 1 commit into
masterfrom
automated/noid/master-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Sep 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 1 of the total 63 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

dompurify #

  • DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
  • Severity: moderate
  • Reference: GHSA-55q2-fjhq-7xh7
  • Affected versions: <=3.4.15
  • Package usage:
    • node_modules/dompurify

@nextcloud-command nextcloud-command added 3. to review Waiting for reviews dependencies Pull requests that update a dependency file labels Sep 27, 2026
@nextcloud-command
nextcloud-command force-pushed the automated/noid/master-fix-npm-audit branch from a320be7 to decbb58 Compare October 4, 2026 09:25
@nextcloud-command
nextcloud-command force-pushed the automated/noid/master-fix-npm-audit branch from decbb58 to 55933db Compare October 11, 2026 10:01
@nextcloud-command
fix(deps): Fix npm audit
653a23d 
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/master-fix-npm-audit branch from 55933db to 653a23d Compare October 18, 2026 07:52

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

3. to review Waiting for reviews dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nextcloud-command