Skip to content

[main] Fix npm audit - #23

Open
nextcloud-command wants to merge 1 commit into
mainfrom
automated/noid/main-fix-npm-audit
Open

nextcloud-command wants to merge 1 commit into
mainfrom
automated/noid/main-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Aug 2, 2026 •

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 1 of the total 17 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

vitest #

  • Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
  • Severity: moderate (CVSS 5.9)
  • Reference: GHSA-82fw-gwwq-j7x9
  • Affected versions: 2.1.0-beta.1 - 4.1.10
  • Package usage:
    • node_modules/vitest

@nextcloud-command nextcloud-command added 3. to review Waiting for reviews dependencies Pull requests that update a dependency file labels Aug 2, 2026
@nextcloud-command
nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch 2 times, most recently from 006fd5d to 2a67a03 Compare August 16, 2026 03:42
@nextcloud-command
nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 2a67a03 to ae38e18 Compare August 23, 2026 03:56
@nextcloud-command
nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from ae38e18 to 616f0e3 Compare September 6, 2026 07:30
@nextcloud-command
nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 616f0e3 to d77ab81 Compare September 13, 2026 07:58
@nextcloud-command
nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from d77ab81 to abbef2a Compare September 20, 2026 08:17
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from abbef2a to d8136a7 Compare September 27, 2026 08:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant