Skip to content

Conversation

@nextcloud-command
Copy link
Collaborator

@nextcloud-command nextcloud-command commented Jun 16, 2024

Audit report

This audit fix resolves 2 of the total 7 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

braces #

  • Uncontrolled resource consumption in braces
  • Severity: high (CVSS 7.5)
  • Reference: GHSA-grv7-fg5c-xmjg
  • Affected versions: <3.0.3
  • Package usage:
    • node_modules/braces

ws #

  • ws affected by a DoS when handling a request with many HTTP headers
  • Severity: high (CVSS 7.5)
  • Reference: GHSA-3h5v-q93c-6h6q
  • Affected versions: 6.0.0 - 6.2.2 || 8.0.0 - 8.17.0
  • Package usage:
    • node_modules/ws
    • node_modules/y-websocket/node_modules/ws

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Jun 16, 2024
@nextcloud-command nextcloud-command force-pushed the automated/noid/stable29-fix-npm-audit branch from 05a6aa1 to 7170544 Compare June 23, 2024 03:08
@mejo- mejo- force-pushed the automated/noid/stable29-fix-npm-audit branch from 7170544 to f54a980 Compare June 26, 2024 08:56
@mejo- mejo- merged commit 4a9fb59 into stable29 Jun 26, 2024
@mejo- mejo- deleted the automated/noid/stable29-fix-npm-audit branch June 26, 2024 10:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants