Skip to content

[stable33] Fix npm audit - #1110

Open
nextcloud-command wants to merge 1 commit into
stable33from
automated/noid/stable33-fix-npm-audit
Open

[stable33] Fix npm audit#1110
nextcloud-command wants to merge 1 commit into
stable33from
automated/noid/stable33-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Oct 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 1 of the total 51 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

dompurify #

  • DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes
  • Severity: critical 🚨
  • Reference: GHSA-cg2g-xh64-v4q7
  • Affected versions: <=3.4.16
  • Package usage:
    • node_modules/dompurify

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Oct 11, 2026
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable33-fix-npm-audit branch from 3bca39c to 1991cf2 Compare October 18, 2026 07:47
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable33-fix-npm-audit branch from 1991cf2 to c60ce95 Compare October 25, 2026 07:55
@nextcloud-command
fix(deps): Fix npm audit
e4d1376 
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable33-fix-npm-audit branch from c60ce95 to e4d1376 Compare November 1, 2026 09:41

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nextcloud-command