Skip to content

[main] Fix npm audit #1702

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
nextcloud-command wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[main] Fix npm audit #1702

nextcloud-command wants to merge 1 commit into from
+778 −1,713

Conversation

@nextcloud-command
Copy link
Contributor

@nextcloud-command nextcloud-command commented Dec 14, 2025 •
edited
Loading

Audit report

This audit fix resolves 2 of the total 24 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@nextcloud/dialogs #

  • Caused by vulnerable dependency:
  • Affected versions: 7.0.0-rc.0 - 7.1.0
  • Package usage:
    • node_modules/@nextcloud/dialogs

diff #

  • jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
  • Severity: low
  • Reference: GHSA-73rr-hh4g-fpgx
  • Affected versions: <8.0.3
  • Package usage:
    • node_modules/diff

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Dec 14, 2025
@enjeck enjeck force-pushed the automated/noid/main-fix-npm-audit branch from b83b08a to e449c75 Compare December 16, 2025 05:26
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from e449c75 to bc2e4a0 Compare December 28, 2025 03:32
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from bc2e4a0 to 0843146 Compare January 4, 2026 03:37
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 0843146 to a78e350 Compare January 11, 2026 03:47
@nextcloud-command
fix(deps): Fix npm audit
6923c89 
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from a78e350 to 6923c89 Compare January 18, 2026 03:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@JuliaKirschenheuter JuliaKirschenheuter Awaiting requested review from JuliaKirschenheuter JuliaKirschenheuter is a code owner

@enjeck enjeck Awaiting requested review from enjeck enjeck is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@nextcloud-command