[main] Fix npm audit

[nextcloud-command]

Audit report

This audit fix resolves 7 of the total 7 vulnerabilities found in your project.

Updated dependencies

• @vue/component-compiler-utils
• elliptic
• http-proxy-middleware
• postcss
• vue
• vue-loader
• vue-template-compiler

Fixed vulnerabilities

@vue/component-compiler-utils #

• Caused by vulnerable dependency:
  • postcss
• Affected versions: *
• Package usage:
  • node_modules/@vue/component-compiler-utils

elliptic #

• Valid ECDSA signatures erroneously rejected in Elliptic
• Severity: low
• Reference: GHSA-fc9h-whq2-v747
• Affected versions: <=6.5.7
• Package usage:
  • node_modules/elliptic

http-proxy-middleware #

• Denial of service in http-proxy-middleware
• Severity: high (CVSS 7.5)
• Reference: GHSA-c7qv-q95q-8v27
• Affected versions: <2.0.7
• Package usage:
  • node_modules/http-proxy-middleware

postcss #

• PostCSS line return parsing error
• Severity: moderate (CVSS 5.3)
• Reference: GHSA-7fh5-64p2-3v2j
• Affected versions: <8.4.31
• Package usage:
  • node_modules/postcss

vue #

• ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function
• Severity: low (CVSS 3.7)
• Reference: GHSA-5j4c-8p2g-v4jx
• Affected versions: 2.0.0-alpha.1 - 2.7.16
• Package usage:
  • node_modules/vue

vue-loader #

• Caused by vulnerable dependency:
  • @vue/component-compiler-utils
• Affected versions: 15.0.0-beta.1 - 15.11.1
• Package usage:
  • node_modules/vue-loader

vue-template-compiler #

• vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)
• Severity: moderate (CVSS 4.2)
• Reference: GHSA-g3ch-rx76-35fx
• Affected versions: >=2.0.0
• Package usage:
  • node_modules/vue-template-compiler