Skip to content

[stable8.0] Fix npm audit#4835

Merged
hamza221 merged 1 commit into
stable8.0from
automated/noid/stable8.0-fix-npm-audit
Nov 4, 2025
Merged

[stable8.0] Fix npm audit#4835
hamza221 merged 1 commit into
stable8.0from
automated/noid/stable8.0-fix-npm-audit

Conversation

@nextcloud-command

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 1 of the total 3 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

validator #

  • validator.js has a URL validation bypass vulnerability in its isURL function
  • Severity: moderate (CVSS 6.1)
  • Reference: GHSA-9965-vmph-33xx
  • Affected versions: <13.15.20
  • Package usage:
    • node_modules/validator

Signed-off-by: GitHub <noreply@github.com>
@codecov

codecov Bot commented Nov 2, 2025

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 9.70%. Comparing base (684dece) to head (394cc27).
⚠️ Report is 5 commits behind head on stable8.0.

Additional details and impacted files
@@             Coverage Diff             @@
##             stable8.0   #4835   +/-   ##
===========================================
  Coverage         9.70%   9.70%           
  Complexity         266     266           
===========================================
  Files              124     124           
  Lines             6337    6337           
  Branches          1190    1190           
===========================================
  Hits               615     615           
  Misses            5600    5600           
  Partials           122     122           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@hamza221
hamza221 merged commit cdf7a6f into stable8.0 Nov 4, 2025
34 checks passed
@hamza221
hamza221 deleted the automated/noid/stable8.0-fix-npm-audit branch November 4, 2025 14:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants