Skip to content

chore[stable27] - audit dependencies - #924

Merged
Antreesy merged 1 commit into
stable27from
chore/stable27/audit-dependencies
Jul 10, 2023
Merged

chore[stable27] - audit dependencies#924
Antreesy merged 1 commit into
stable27from
chore/stable27/audit-dependencies

Conversation

@Antreesy

@AntreesyAntreesy commented Jul 7, 2023

Copy link
Copy Markdown
Collaborator

Smoke tested

4 moderate severity vulnerabilities are left from babel-loader@8.2.5. Same for babel-loader@9.1.2, so nothing we could do until it's fixed upstream

Source:

semver <7.5.2
Severity: moderate
semver vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
No fix available

@AntreesyAntreesy added security dependencies Pull requests that update a dependency file javascript labels Jul 7, 2023
@AntreesyAntreesy added this to the Nextcloud 27.0.1 milestone Jul 7, 2023
@Antreesy
Antreesy requested a review from icewind1991July 7, 2023 10:12
@AntreesyAntreesy self-assigned this Jul 7, 2023
@Antreesy

Copy link
Copy Markdown
CollaboratorAuthor

/compile amend

Signed-off-by: Maksim Sukharev <antreesy.web@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
@nextcloud-command
nextcloud-commandforce-pushed the chore/stable27/audit-dependencies branch from ec68bc1 to 3f466f3CompareJuly 7, 2023 11:34
@blizzzblizzz mentioned this pull request Jul 10, 2023
@Antreesy
Antreesy requested a review from skjnldsvJuly 10, 2023 20:01
@Antreesy
Antreesy merged commit cab48c3 into stable27Jul 10, 2023
@delete-merged-branch
delete-merged-branchBot deleted the chore/stable27/audit-dependencies branch July 10, 2023 21:57
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to reviewdependenciesPull requests that update a dependency filejavascriptsecurity

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@Antreesy@Pytal@blizzz