Skip to content

[stable31] Fix npm audit - #7523

Closed
nextcloud-command wants to merge 1 commit into
stable31from
automated/noid/stable31-fix-npm-audit
Closed

[stable31] Fix npm audit#7523
nextcloud-command wants to merge 1 commit into
stable31from
automated/noid/stable31-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Jan 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 1 of the total 86 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

markdown-it #

  • markdown-it is has a Regular Expression Denial of Service (ReDoS)
  • Severity: moderate (CVSS 5.3)
  • Reference: GHSA-38c4-r59v-3vqw
  • Affected versions: 13.0.0 - 14.1.0
  • Package usage:
    • node_modules/markdown-it

@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable31-fix-npm-audit branch from be4bab5 to 8961a35 Compare January 18, 2026 03:41
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable31-fix-npm-audit branch from 8961a35 to 40fd056 Compare January 25, 2026 03:51
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable31-fix-npm-audit branch 2 times, most recently from 552dadf to 677208c Compare February 8, 2026 04:14
@nextcloud-command
fix(deps): Fix npm audit
270bc93 
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable31-fix-npm-audit branch 2 times, most recently from 270bc93 to 477a64c Compare February 22, 2026 03:48
@grnd-alt
grnd-alt enabled auto-merge February 23, 2026 09:45
auto-merge was automatically disabled February 23, 2026 09:45

Head branch was modified

@blizzz blizzz mentioned this pull request Feb 23, 2026
Merged
@grnd-alt grnd-alt closed this Feb 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@grnd-alt grnd-alt grnd-alt approved these changes
@luka-nextcloud luka-nextcloud Awaiting requested review from luka-nextcloud luka-nextcloud is a code owner
@elzody elzody Awaiting requested review from elzody

Assignees

No one assigned

Labels

3. to review dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@nextcloud-command @grnd-alt