Skip to content

Conversation

@nextcloud-command
Copy link
Collaborator

Audit report

This audit fix resolves 4 of the total 9 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vue/component-compiler-utils #

  • Caused by vulnerable dependency:
  • Affected versions: *
  • Package usage:
    • node_modules/@vue/component-compiler-utils

@vue/test-utils #

  • Caused by vulnerable dependency:
  • Affected versions: <=1.3.6
  • Package usage:
    • node_modules/@vue/test-utils

postcss #

  • PostCSS line return parsing error
  • Severity: moderate (CVSS 5.3)
  • Reference: GHSA-7fh5-64p2-3v2j
  • Affected versions: <8.4.31
  • Package usage:
    • node_modules/@vue/component-compiler-utils/node_modules/postcss

vue-tsc #

  • Caused by vulnerable dependency:
  • Affected versions: 1.7.0-alpha.0 - 2.0.28
  • Package usage:
    • node_modules/vue-tsc

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Jul 28, 2024
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 22847a7 to edbc9b3 Compare August 4, 2024 03:10
@mejo- mejo- force-pushed the automated/noid/main-fix-npm-audit branch from edbc9b3 to 0f086ab Compare August 5, 2024 08:20
@juliusknorr juliusknorr merged commit 167b3eb into main Aug 5, 2024
@juliusknorr juliusknorr deleted the automated/noid/main-fix-npm-audit branch August 5, 2024 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants