Skip to content

Commit 88198c2

Browse files
authored
Merge pull request #2632 from nextcloud/automated/noid/master-fix-npm-audit
[master] Fix npm audit
2 parents a48a556 + e31bc48 commit 88198c2

2 files changed

Lines changed: 39 additions & 91 deletions

File tree

package-lock.json

Lines changed: 35 additions & 57 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

pr-body.md

Lines changed: 4 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,5 @@
11
# Audit report
2-
3-
This audit fix resolves 1 of the total 18 vulnerabilities found in your project.
4-
5-
## Updated dependencies
6-
* [@nextcloud/cypress](#user-content-\\@nextcloud\\/cypress)
7-
## Fixed vulnerabilities
8-
9-
### `@nextcloud/cypress` <a href="#user-content-\@nextcloud\/cypress" id="\@nextcloud\/cypress">#</a>
10-
* Caused by vulnerable dependency:
11-
* [cypress](#user-content-cypress)
12-
* Affected versions:
13-
* Package usage:
14-
* `node_modules/@nextcloud/cypress`
15-
2+
No fixable problems found (7 unfixable, 3 only fixable manually using --force)
163

174
## Full `npm audit` report
185

@@ -43,33 +30,16 @@ node_modules/elliptic
4330
Depends on vulnerable versions of elliptic
4431
node_modules/create-ecdh
4532
46-
qs 6.11.1 - 6.15.1
47-
Severity: moderate
48-
qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set - https://github.com/advisories/GHSA-q8mj-m7cp-5q26
49-
fix available via `npm audit fix`
50-
node_modules/qs
51-
@cypress/request *
52-
Depends on vulnerable versions of qs
53-
Depends on vulnerable versions of uuid
54-
node_modules/@cypress/request
55-
cypress 4.3.0 - 15.14.2
56-
Depends on vulnerable versions of @cypress/request
57-
node_modules/cypress
58-
@nextcloud/cypress
59-
Depends on vulnerable versions of cypress
60-
node_modules/@nextcloud/cypress
61-
6233
uuid <11.1.1
6334
Severity: moderate
6435
uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided - https://github.com/advisories/GHSA-w5hq-g745-h8pq
6536
fix available via `npm audit fix`
66-
node_modules/@nextcloud/cypress/node_modules/uuid
6737
node_modules/uuid
6838
dockerode 4.0.3 - 4.0.12
6939
Depends on vulnerable versions of uuid
70-
node_modules/@nextcloud/cypress/node_modules/dockerode
40+
node_modules/@nextcloud/e2e-test-server/node_modules/dockerode
7141
72-
13 vulnerabilities (7 low, 6 moderate)
42+
9 vulnerabilities (7 low, 2 moderate)
7343
7444
To address issues that do not require attention, run:
7545
npm audit fix
@@ -78,4 +48,4 @@ Some issues need review, and may require choosing
7848
a different dependency.
7949
```
8050

81-
**Node.js:** v24.16.0 | **npm:** 11.15.0 | **Branch:** master
51+
**Node.js:** v24.16.0 | **npm:** 11.16.0 | **Branch:** master

0 commit comments

Comments
 (0)