Skip to content

[stable35] Fix npm audit - #1205

Merged
github-actions[bot] merged 1 commit into
stable35from
automated/noid/stable35-fix-npm-audit
Oct 18, 2026
Merged

github-actions[bot] merged 1 commit into
stable35from
automated/noid/stable35-fix-npm-audit

Conversation

@nextcloud-command

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 2 of the total 16 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vue/server-renderer #

  • @vue/server-renderer: XSS via missing CR in attribute-name blacklist
  • Severity: high (CVSS 7.2)
  • Reference: GHSA-g2v6-rqmx-r4w6
  • Affected versions: <=3.5.41
  • Package usage:
    • node_modules/@vue/server-renderer

vue #

  • Caused by vulnerable dependency:
  • Affected versions: 3.2.13 - 3.5.41
  • Package usage:
    • node_modules/vue

@github-actions
github-actions Bot enabled auto-merge October 11, 2026 09:56
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from c1ad596 to 97b53f5 Compare October 18, 2026 07:48
@github-actions
github-actions Bot merged commit 9fe4187 into stable35 Oct 18, 2026
32 checks passed
@github-actions
github-actions Bot deleted the automated/noid/stable35-fix-npm-audit branch October 18, 2026 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant