Skip to content

Conversation

@nextcloud-command
Copy link
Contributor

@nextcloud-command nextcloud-command commented Dec 8, 2024

Audit report

This audit fix resolves 6 of the total 13 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@babel/helpers #

  • Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
  • Severity: moderate (CVSS 6.2)
  • Reference: GHSA-968p-4wvh-cqc8
  • Affected versions: <7.26.10
  • Package usage:
    • node_modules/@babel/helpers

express #

  • Caused by vulnerable dependency:
  • Affected versions: 4.0.0-rc1 - 4.21.1 || 5.0.0-alpha.1 - 5.0.0-beta.3
  • Package usage:
    • node_modules/express

path-to-regexp #

  • Unpatched path-to-regexp ReDoS in 0.1.x
  • Severity: high
  • Reference: GHSA-rhx6-c78j-4q9w
  • Affected versions: <0.1.12
  • Package usage:
    • node_modules/path-to-regexp

vue-resize #

  • Caused by vulnerable dependency:
  • Affected versions: 0.4.0 - 1.0.1
  • Package usage:
    • node_modules/vue-resize

vue-template-compiler #

  • vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)
  • Severity: moderate (CVSS 4.2)
  • Reference: GHSA-g3ch-rx76-35fx
  • Affected versions: >=2.0.0
  • Package usage:
    • node_modules/vue-template-compiler

vuex #

  • Caused by vulnerable dependency:
  • Affected versions: 3.1.3 - 3.6.2
  • Package usage:
    • node_modules/vuex

@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch 2 times, most recently from ab80439 to 8b22389 Compare December 22, 2024 03:16
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 8b22389 to 6e17be8 Compare December 29, 2024 03:13
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch 2 times, most recently from c76f8d4 to e42bf12 Compare January 19, 2025 03:17
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch 2 times, most recently from 8ab97e0 to d425225 Compare February 2, 2025 03:18
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from d425225 to 53b5720 Compare February 9, 2025 03:17
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 53b5720 to 897500c Compare February 16, 2025 03:26
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch 2 times, most recently from 1b8f6cf to b782ee1 Compare March 2, 2025 03:26
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from b782ee1 to 259276e Compare March 9, 2025 02:59
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 259276e to f198c28 Compare March 16, 2025 03:13
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from f198c28 to 18d9e76 Compare March 23, 2025 03:24
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 18d9e76 to 45a49ff Compare March 30, 2025 03:32
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 45a49ff to 0b5fe14 Compare April 6, 2025 03:33
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch 2 times, most recently from 7fbf7b9 to 98cbed0 Compare April 20, 2025 03:34
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 98cbed0 to 20fb5af Compare April 27, 2025 03:44
@DorraJaouad DorraJaouad merged commit 900d3ad into main Apr 28, 2025
42 checks passed
@DorraJaouad DorraJaouad deleted the automated/noid/main-fix-npm-audit branch April 28, 2025 19:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants