Skip to content

[stable29] Fix npm audit - #5915

Merged
mejo- merged 1 commit into
stable29from
automated/noid/stable29-fix-npm-audit
Jun 26, 2024
Merged

[stable29] Fix npm audit#5915
mejo- merged 1 commit into
stable29from
automated/noid/stable29-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-commandnextcloud-command commented Jun 16, 2024

Copy link
Copy Markdown
Collaborator

Audit report

This audit fix resolves 2 of the total 7 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

braces #

  • Uncontrolled resource consumption in braces
  • Severity: high (CVSS 7.5)
  • Reference: GHSA-grv7-fg5c-xmjg
  • Affected versions: <3.0.3
  • Package usage:
    • node_modules/braces

ws #

  • ws affected by a DoS when handling a request with many HTTP headers
  • Severity: high (CVSS 7.5)
  • Reference: GHSA-3h5v-q93c-6h6q
  • Affected versions: 6.0.0 - 6.2.2 || 8.0.0 - 8.17.0
  • Package usage:
    • node_modules/ws
    • node_modules/y-websocket/node_modules/ws

@nextcloud-commandnextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Jun 16, 2024
@nextcloud-command
nextcloud-commandforce-pushed the automated/noid/stable29-fix-npm-audit branch from 05a6aa1 to 7170544CompareJune 23, 2024 03:08
Signed-off-by: GitHub <noreply@github.com>
@mejo-
mejo-force-pushed the automated/noid/stable29-fix-npm-audit branch from 7170544 to f54a980CompareJune 26, 2024 08:56
@mejo-
mejo- merged commit 4a9fb59 into stable29Jun 26, 2024
@mejo-
mejo- deleted the automated/noid/stable29-fix-npm-audit branch June 26, 2024 10:34
@AltahrimAltahrim mentioned this pull request Jul 10, 2024
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to reviewdependenciesPull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@nextcloud-command@mejo-