[stable33] Fix npm audit

[nextcloud-command]

Audit report

This audit fix resolves 3 of the total 44 vulnerabilities found in your project.

Updated dependencies

• @nextcloud/cypress
• dompurify
• vite

Fixed vulnerabilities

@nextcloud/cypress #

• Caused by vulnerable dependency:
  • cypress
• Affected versions:
• Package usage:
  • node_modules/@nextcloud/cypress

dompurify #

• DOMPurify: IN_PLACE mode trusts attacker-controlled nodeName on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects
• Severity: low
• Reference: GHSA-x4vx-rjvf-j5p4
• Affected versions: <=3.4.10
• Package usage:
  • node_modules/dompurify

vite #

• launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows
• Severity: moderate
• Reference: GHSA-v6wh-96g9-6wx3
• Affected versions: 7.0.0 - 7.3.3
• Package usage:
  • node_modules/vite