Skip to content

[stable34] Fix npm audit - #3683

Merged
susnux merged 2 commits into
stable34from
automated/noid/stable34-fix-npm-audit
Aug 4, 2026
Merged

[stable34] Fix npm audit#3683
susnux merged 2 commits into
stable34from
automated/noid/stable34-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Jul 19, 2026

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 2 of the total 33 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

axios #

  • Axios: Excessive recursion in formDataToJSON can cause denial of service
  • Severity: moderate
  • Reference: GHSA-42h9-826w-cgv3
  • Affected versions: 1.0.0 - 1.17.0
  • Package usage:
    • node_modules/axios

postcss #

  • PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure
  • Severity: high (CVSS 7.5)
  • Reference: GHSA-r28c-9q8g-f849
  • Affected versions: <=8.5.17
  • Package usage:
    • node_modules/postcss

@nextcloud-command nextcloud-command added 3. to review Waiting for reviews dependencies Pull requests that update a dependency file labels Jul 19, 2026
@codecov

codecov Bot commented Jul 19, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable34-fix-npm-audit branch from 1a8c72c to d85eeb4 Compare August 2, 2026 06:09
nextcloud-command and others added 2 commits August 4, 2026 14:50
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
@susnux
susnux force-pushed the automated/noid/stable34-fix-npm-audit branch from d85eeb4 to 6d6c643 Compare August 4, 2026 12:56
@susnux
susnux merged commit 0bf7059 into stable34 Aug 4, 2026
25 of 26 checks passed
@susnux
susnux deleted the automated/noid/stable34-fix-npm-audit branch August 4, 2026 12:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants