Skip to content

[master] Fix npm audit - #2905

Open
nextcloud-command wants to merge 1 commit into
masterfrom
automated/noid/master-fix-npm-audit
Open

[master] Fix npm audit#2905
nextcloud-command wants to merge 1 commit into
masterfrom
automated/noid/master-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 2 of the total 18 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@vitest/coverage-v8 #

  • Caused by vulnerable dependency:
  • Affected versions: 2.1.0-beta.1 - 4.1.10
  • Package usage:
    • node_modules/@vitest/coverage-v8

vitest #

  • Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
  • Severity: moderate (CVSS 5.9)
  • Reference: GHSA-82fw-gwwq-j7x9
  • Affected versions: 2.1.0-beta.1 - 4.1.10
  • Package usage:
    • node_modules/vitest

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Sep 6, 2026
@codecov

codecov Bot commented Sep 6, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/master-fix-npm-audit branch from 9ea86b9 to 970e142 Compare September 13, 2026 08:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant