Skip to content

[stable34] Fix npm audit - #966

Merged
CarlSchwan merged 1 commit into
stable34from
automated/noid/stable34-fix-npm-audit
Aug 13, 2026
Merged

[stable34] Fix npm audit#966
CarlSchwan merged 1 commit into
stable34from
automated/noid/stable34-fix-npm-audit

Conversation

@nextcloud-command

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 1 of the total 15 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

dompurify #

  • DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
  • Severity: moderate
  • Reference: GHSA-55q2-fjhq-7xh7
  • Affected versions: <=3.4.12
  • Package usage:
    • node_modules/dompurify

Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Aug 9, 2026
@CarlSchwan
CarlSchwan merged commit 8cf3bb0 into stable34 Aug 13, 2026
53 checks passed
@CarlSchwan
CarlSchwan deleted the automated/noid/stable34-fix-npm-audit branch August 13, 2026 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants