Skip to content

[stable33] Fix npm audit - #9463

Merged
silverkszlo merged 1 commit into
stable33from
automated/noid/stable33-fix-npm-audit
Oct 27, 2026
Merged

silverkszlo merged 1 commit into
stable33from
automated/noid/stable33-fix-npm-audit

Conversation

@nextcloud-command

Copy link
Copy Markdown
Collaborator

Audit report

This audit fix resolves 5 of the total 45 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@tiptap/extension-mathematics #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.29.2
  • Package usage:
    • node_modules/@tiptap/extension-mathematics

@vitest/coverage-v8 #

  • Caused by vulnerable dependency:
  • Affected versions: 2.1.0-beta.1 - 4.1.11
  • Package usage:
    • node_modules/@vitest/coverage-v8

markdown-it #

  • markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled
  • Severity: low (CVSS 3.7)
  • Reference: GHSA-vfgh-jcmw-g37q
  • Affected versions: <=14.3.2
  • Package usage:
    • node_modules/markdown-it

vite #

  • launch-editor: escapeCmdArgs() omits % escaping on Windows
  • Severity: moderate
  • Reference: GHSA-698v-4r3x-3vcv
  • Affected versions: 7.0.0 - 7.3.6
  • Package usage:
    • node_modules/vite

vitest #

Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Oct 25, 2026
@silverkszlo
silverkszlo merged commit ef55d08 into stable33 Oct 27, 2026
66 of 69 checks passed
@silverkszlo
silverkszlo deleted the automated/noid/stable33-fix-npm-audit branch October 27, 2026 09:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants