Skip to content

[stable33] Fix npm audit - #958

Open
nextcloud-command wants to merge 1 commit into
stable33from
automated/noid/stable33-fix-npm-audit
Open

[stable33] Fix npm audit#958
nextcloud-command wants to merge 1 commit into
stable33from
automated/noid/stable33-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Aug 2, 2026

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 1 of the total 15 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

dompurify #

  • DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
  • Severity: moderate
  • Reference: GHSA-55q2-fjhq-7xh7
  • Affected versions: <=3.4.12
  • Package usage:
    • node_modules/dompurify

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Aug 2, 2026
@AndyScherzinger AndyScherzinger added this to the Nextcloud 33.0.8 milestone Aug 2, 2026
@oleksandr-nc

Copy link
Copy Markdown
Contributor

Does this PR changes something? I am in favor of closing it..

Signed-off-by: GitHub <noreply@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants