Skip to content

[stable34] Fix npm audit - #1308

Open
nextcloud-command wants to merge 1 commit into
stable34from
automated/noid/stable34-fix-npm-audit
Open

nextcloud-command wants to merge 1 commit into
stable34from
automated/noid/stable34-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Sep 20, 2026 •

Copy link
Copy Markdown
Collaborator

Audit report

This audit fix resolves 2 of the total 47 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vue/server-renderer #

  • @vue/server-renderer: XSS via missing CR in attribute-name blacklist
  • Severity: high (CVSS 7.2)
  • Reference: GHSA-g2v6-rqmx-r4w6
  • Affected versions: <=3.5.41
  • Package usage:
    • node_modules/@vue/server-renderer

vue #

  • Caused by vulnerable dependency:
  • Affected versions: 3.2.13 - 3.5.41
  • Package usage:
    • node_modules/vue

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Sep 20, 2026
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch from 0a96379 to 696edbd Compare September 27, 2026 08:59
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch from 696edbd to ae2a65c Compare October 4, 2026 09:32
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch from ae2a65c to 307c1f4 Compare October 11, 2026 10:04

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants