Skip to content

[main] Fix npm audit - #13934

Open
nextcloud-command wants to merge 1 commit into
mainfrom
automated/noid/main-fix-npm-audit
Open

nextcloud-command wants to merge 1 commit into
mainfrom
automated/noid/main-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Oct 25, 2026 •

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 2 of the total 96 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

node-forge #

  • node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements
  • Severity: high (CVSS 7.5)
  • Reference: GHSA-86w9-cpqp-85rv
  • Affected versions: <=1.4.0
  • Package usage:
    • node_modules/node-forge

vitest #

  • Caused by vulnerable dependency:
  • Affected versions: 5.0.0-beta.1 - 5.0.2
  • Package usage:
    • node_modules/vitest

@nextcloud-command
nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from 4782213 to a522bc6 Compare November 1, 2026 01:33
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/main-fix-npm-audit branch from a522bc6 to 30dcfb8 Compare November 8, 2026 01:54

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant