Skip to content

[stable32] Fix npm audit - #3512

Open
nextcloud-command wants to merge 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit
Open

[stable32] Fix npm audit#3512
nextcloud-command wants to merge 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented May 10, 2026

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 1 of the total 53 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

postcss #

  • PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure
  • Severity: high (CVSS 7.5)
  • Reference: GHSA-r28c-9q8g-f849
  • Affected versions: <=8.5.22
  • Package usage:
    • node_modules/postcss

@nextcloud-command nextcloud-command added 3. to review Waiting for reviews dependencies Pull requests that update a dependency file labels May 10, 2026
@codecov

codecov Bot commented May 10, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 2b3d6fd to 552c955 Compare May 17, 2026 04:23
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch 2 times, most recently from a503b8a to 6fc453d Compare May 31, 2026 04:23
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch 2 times, most recently from bb5d615 to 52e5732 Compare June 14, 2026 04:27
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch 2 times, most recently from 3d2ef24 to 6cf0b09 Compare June 28, 2026 04:29
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch 4 times, most recently from 365576f to 09ae539 Compare July 4, 2026 10:02
@AndyScherzinger AndyScherzinger added this to the Nextcloud 32.0.13 milestone Jul 9, 2026
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 09ae539 to b658119 Compare July 12, 2026 06:05
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from b658119 to 7d903b5 Compare July 19, 2026 05:58
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 7d903b5 to 192e70e Compare August 2, 2026 06:06
Signed-off-by: GitHub <noreply@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants