Skip to content

[main] Fix npm audit - #9080

Merged
vitormattos merged 2 commits into
mainfrom
automated/noid/main-fix-npm-audit
Oct 19, 2026
Merged

vitormattos merged 2 commits into
mainfrom
automated/noid/main-fix-npm-audit

Conversation

@vitormattos

Copy link
Copy Markdown
Member

Audit report

This audit fix resolves 2 of the total 23 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vue/server-renderer #

  • @vue/server-renderer: XSS via missing CR in attribute-name blacklist
  • Severity: high (CVSS 7.2)
  • Reference: GHSA-g2v6-rqmx-r4w6
  • Affected versions: <=3.5.41
  • Package usage:
    • node_modules/@nextcloud/dialogs/node_modules/@vue/server-renderer
    • node_modules/@vue/server-renderer

vue #

  • Caused by vulnerable dependency:
  • Affected versions: 3.2.13 - 3.5.41
  • Package usage:
    • node_modules/@nextcloud/dialogs/node_modules/vue
    • node_modules/vue

@vitormattos
vitormattos requested a review from a team as a code owner October 11, 2026 09:05
Signed-off-by: GitHub <noreply@github.com>
@vitormattos
vitormattos force-pushed the automated/noid/main-fix-npm-audit branch from 3c18858 to 35980d4 Compare October 18, 2026 07:19
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
vitormattos merged commit 3897fce into main Oct 19, 2026
66 of 67 checks passed
@vitormattos
vitormattos deleted the automated/noid/main-fix-npm-audit branch October 19, 2026 16:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants