Skip to content

[master] Fix npm audit - #5247

Merged
github-actions[bot] merged 1 commit into
masterfrom
automated/noid/master-fix-npm-audit
Nov 8, 2026
Merged

github-actions[bot] merged 1 commit into
masterfrom
automated/noid/master-fix-npm-audit

Conversation

@nextcloud-command

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 2 of the total 30 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vue/server-renderer #

  • @vue/server-renderer: XSS via missing CR in attribute-name blacklist
  • Severity: high (CVSS 7.2)
  • Reference: GHSA-g2v6-rqmx-r4w6
  • Affected versions: <=3.5.41
  • Package usage:
    • node_modules/@vue/server-renderer

vue #

  • Caused by vulnerable dependency:
  • Affected versions: 3.2.13 - 3.5.41
  • Package usage:
    • node_modules/vue

Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command nextcloud-command added 3. to review Items that need to be reviewed dependencies labels Nov 8, 2026
@github-actions
github-actions Bot enabled auto-merge November 8, 2026 01:44
@github-actions
github-actions Bot merged commit b3788cd into master Nov 8, 2026
44 checks passed
@github-actions
github-actions Bot deleted the automated/noid/master-fix-npm-audit branch November 8, 2026 02:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Items that need to be reviewed dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant