Skip to content

[stable32] Fix npm audit#8742

Open
nextcloud-command wants to merge 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit
Open

[stable32] Fix npm audit#8742
nextcloud-command wants to merge 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Jun 14, 2026

Copy link
Copy Markdown
Collaborator

Audit report

This audit fix resolves 2 of the total 37 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

markdown-it #

  • markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations
  • Severity: moderate (CVSS 5.3)
  • Reference: GHSA-6v5v-wf23-fmfq
  • Affected versions: <=14.1.1
  • Package usage:
    • node_modules/markdown-it

vite #

  • launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows
  • Severity: moderate
  • Reference: GHSA-v6wh-96g9-6wx3
  • Affected versions: 7.0.0 - 7.3.3
  • Package usage:
    • node_modules/vite

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Jun 14, 2026
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 5429f26 to b8a91c0 Compare June 21, 2026 04:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants