New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[stable31] Fix npm audit #916

Merged

come-nc merged 1 commit into stable31 from automated/noid/stable31-fix-npm-audit

Feb 20, 2025

Contributor

nextcloud-command commented Feb 2, 2025 •

edited

Loading

Audit report

This audit fix resolves 6 of the total 13 vulnerabilities found in your project.

Updated dependencies

@nextcloud/dialogs
@nextcloud/l10n
@nextcloud/vite-config
@vitejs/plugin-vue2
node-gettext
vue-resize

Fixed vulnerabilities

@nextcloud/dialogs #

Caused by vulnerable dependency:
Affected versions: >=4.2.0-beta.1
Package usage:
- node_modules/@nextcloud/dialogs

@nextcloud/l10n #

Caused by vulnerable dependency:
- node-gettext
Affected versions: 1.1.0 - 3.1.0
Package usage:
- node_modules/@nextcloud/l10n

@nextcloud/vite-config #

Caused by vulnerable dependency:
- @vitejs/plugin-vue2
Affected versions: <=1.5.2
Package usage:
- node_modules/@nextcloud/vite-config

@vitejs/plugin-vue2 #

Caused by vulnerable dependency:
- vue
Affected versions: *
Package usage:
- node_modules/@vitejs/plugin-vue2

node-gettext #

node-gettext vulnerable to Prototype Pollution
Severity: high (CVSS 5.9)
Reference: GHSA-g974-hxvm-x689
Affected versions: *
Package usage:
- node_modules/node-gettext

vue-resize #

Caused by vulnerable dependency:
- vue
Affected versions: 0.4.0 - 1.0.1
Package usage:
- node_modules/vue-resize

nextcloud-command force-pushed the automated/noid/stable31-fix-npm-audit branch from 471ee5c to ae7fb29 Compare

February 2, 2025 03:22

nextcloud-command added 3. to review dependencies labels

nextcloud-command force-pushed the automated/noid/stable31-fix-npm-audit branch from ae7fb29 to a8a1eef Compare

February 9, 2025 03:19


          fix(deps): Fix npm audit

be0c12b

Signed-off-by: GitHub <noreply@github.com>

nextcloud-command force-pushed the automated/noid/stable31-fix-npm-audit branch from a8a1eef to be0c12b Compare

February 16, 2025 03:28

come-nc approved these changes

View reviewed changes

come-nc merged commit 1cad09d into stable31

25 checks passed

come-nc deleted the automated/noid/stable31-fix-npm-audit branch

February 20, 2025 14:24

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies