Skip to content

[stable32] Fix npm audit - #1412

Merged
danxuliu merged 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit
May 20, 2026
Merged

[stable32] Fix npm audit#1412
danxuliu merged 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Apr 5, 2026

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 1 of the total 30 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

axios #

  • Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF
  • Severity: moderate (CVSS 4.8)
  • Reference: GHSA-3p68-rc4w-qgx5
  • Affected versions: 1.0.0 - 1.15.1
  • Package usage:
    • node_modules/axios

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Apr 5, 2026
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 3d2fc53 to 0c28b86 Compare April 12, 2026 04:03
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 0c28b86 to 632b469 Compare April 19, 2026 04:16
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch 2 times, most recently from e81bddc to ecad602 Compare May 3, 2026 04:14
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from ecad602 to 833e5a2 Compare May 10, 2026 04:16
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 833e5a2 to 136d7cf Compare May 17, 2026 04:22
@danxuliu
danxuliu force-pushed the automated/noid/stable32-fix-npm-audit branch from 136d7cf to 90f9e6b Compare May 20, 2026 18:33
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
@danxuliu
danxuliu force-pushed the automated/noid/stable32-fix-npm-audit branch from 90f9e6b to 90fe3d7 Compare May 20, 2026 18:56

@danxuliu danxuliu left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested and works 👍

@danxuliu
danxuliu merged commit ba95271 into stable32 May 20, 2026
36 checks passed
@danxuliu
danxuliu deleted the automated/noid/stable32-fix-npm-audit branch May 20, 2026 20:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants