Skip to content

[stable35] Fix npm audit - #9079

Open
vitormattos wants to merge 1 commit into
stable35from
automated/noid/stable35-fix-npm-audit
Open

vitormattos wants to merge 1 commit into
stable35from
automated/noid/stable35-fix-npm-audit

Conversation

@vitormattos

Copy link
Copy Markdown
Member

Audit report

This audit fix resolves 2 of the total 24 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vue/server-renderer #

  • @vue/server-renderer: XSS via missing CR in attribute-name blacklist
  • Severity: high (CVSS 7.2)
  • Reference: GHSA-g2v6-rqmx-r4w6
  • Affected versions: <=3.5.41
  • Package usage:
    • node_modules/@nextcloud/dialogs/node_modules/@vue/server-renderer
    • node_modules/@vue/server-renderer

vue #

  • Caused by vulnerable dependency:
  • Affected versions: 3.2.13 - 3.5.41
  • Package usage:
    • node_modules/@nextcloud/dialogs/node_modules/vue
    • node_modules/vue

Signed-off-by: GitHub <noreply@github.com>
@vitormattos
vitormattos requested a review from a team as a code owner October 11, 2026 09:05

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants