Skip to content

[stable35] Fix npm audit - #1035

Open
nextcloud-command wants to merge 1 commit into
stable35from
automated/noid/stable35-fix-npm-audit
Open

nextcloud-command wants to merge 1 commit into
stable35from
automated/noid/stable35-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Sep 6, 2026 •

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 2 of the total 40 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vue/server-renderer #

  • @vue/server-renderer: XSS via missing CR in attribute-name blacklist
  • Severity: high (CVSS 7.2)
  • Reference: GHSA-g2v6-rqmx-r4w6
  • Affected versions: <=3.5.41
  • Package usage:
    • node_modules/@vue/server-renderer

vue #

  • Caused by vulnerable dependency:
  • Affected versions: 3.2.13 - 3.5.41
  • Package usage:
    • node_modules/vue

@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from 6dc40cf to 9e2bc39 Compare September 13, 2026 08:03
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from 9e2bc39 to f9607a4 Compare September 20, 2026 08:21
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from f9607a4 to 1a4eb79 Compare September 27, 2026 08:58
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from 1a4eb79 to 0f7add3 Compare October 4, 2026 09:26
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from 0f7add3 to 7f43564 Compare October 11, 2026 10:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant