Skip to content

[stable35] Fix npm audit - #1257

Merged
github-actions[bot] merged 1 commit into
stable35from
automated/noid/stable35-fix-npm-audit
Sep 24, 2026
Merged

github-actions[bot] merged 1 commit into
stable35from
automated/noid/stable35-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Aug 30, 2026 •

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 3 of the total 22 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@nextcloud/webpack-vue-config #

@vitest/coverage-v8 #

  • Caused by vulnerable dependency:
  • Affected versions: 2.1.0-beta.1 - 4.1.10
  • Package usage:
    • node_modules/@vitest/coverage-v8

vitest #

  • Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
  • Severity: moderate (CVSS 5.9)
  • Reference: GHSA-82fw-gwwq-j7x9
  • Affected versions: 2.1.0-beta.1 - 4.1.10
  • Package usage:
    • node_modules/vitest

@codecov

codecov Bot commented Aug 30, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from 83fa5fc to 813c4a8 Compare September 6, 2026 07:30
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from 813c4a8 to d1cd717 Compare September 13, 2026 08:02
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from d1cd717 to 3933ae7 Compare September 20, 2026 08:20
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable35-fix-npm-audit branch from 3933ae7 to f0f8443 Compare September 24, 2026 18:19
@github-actions
github-actions Bot enabled auto-merge September 24, 2026 18:20
@github-actions
github-actions Bot merged commit 1a8acb1 into stable35 Sep 24, 2026
45 checks passed
@github-actions
github-actions Bot deleted the automated/noid/stable35-fix-npm-audit branch September 24, 2026 18:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant