Skip to content

[stable35] Fix npm audit - #3413

Open
nextcloud-command wants to merge 1 commit into
stable35from
automated/noid/stable35-fix-npm-audit
Open

nextcloud-command wants to merge 1 commit into
stable35from
automated/noid/stable35-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Oct 4, 2026 •

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 1 of the total 51 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

dompurify #

  • DOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DOM XSS
  • Severity: low
  • Reference: GHSA-p98j-92pf-mc4p
  • Affected versions: <=3.4.15
  • Package usage:
    • node_modules/dompurify

@nextcloud-command nextcloud-command added 3. to review Waiting for reviews dependencies Pull requests that update a dependency file labels Oct 4, 2026
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from 20dfe09 to b19a899 Compare October 11, 2026 10:01
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from b19a899 to 72b856f Compare October 18, 2026 07:51

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant