Skip to content

[stable34] Fix npm audit - #9464

Open
nextcloud-command wants to merge 1 commit into
stable34from
automated/noid/stable34-fix-npm-audit
Open

[stable34] Fix npm audit#9464
nextcloud-command wants to merge 1 commit into
stable34from
automated/noid/stable34-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Oct 25, 2026

Copy link
Copy Markdown
Collaborator

Audit report

This audit fix resolves 29 of the total 69 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@tiptap/extension-blockquote #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-blockquote

@tiptap/extension-bold #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-bold

@tiptap/extension-code #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-code

@tiptap/extension-code-block #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-code-block

@tiptap/extension-code-block-lowlight #

@tiptap/extension-collaboration-caret #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-collaboration-caret

@tiptap/extension-document #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-document

@tiptap/extension-hard-break #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-hard-break

@tiptap/extension-heading #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-heading

@tiptap/extension-highlight #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-highlight

@tiptap/extension-horizontal-rule #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-horizontal-rule

@tiptap/extension-image #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-image

@tiptap/extension-italic #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-italic

@tiptap/extension-link #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-link

@tiptap/extension-list #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-list

@tiptap/extension-mathematics #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-mathematics

@tiptap/extension-mention #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-mention

@tiptap/extension-paragraph #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-paragraph

@tiptap/extension-placeholder #

  • Caused by vulnerable dependency:
  • Affected versions: 3.0.0-beta.0 - 3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-placeholder

@tiptap/extension-strike #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-strike

@tiptap/extension-table #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-table

@tiptap/extension-text #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-text

@tiptap/extension-typography #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-typography

@tiptap/extension-underline #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extension-underline

@tiptap/extensions #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/extensions

@tiptap/suggestion #

  • Caused by vulnerable dependency:
  • Affected versions: <=3.0.0-next.8 || 3.22.4 - 3.30.3
  • Package usage:
    • node_modules/@tiptap/suggestion

@vitest/coverage-v8 #

  • Caused by vulnerable dependency:
  • Affected versions: 2.1.0-beta.1 - 4.1.11
  • Package usage:
    • node_modules/@vitest/coverage-v8

markdown-it #

  • markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled
  • Severity: low (CVSS 3.7)
  • Reference: GHSA-vfgh-jcmw-g37q
  • Affected versions: <=14.3.2
  • Package usage:
    • node_modules/markdown-it

vitest #

@nextcloud-command
fix(deps): Fix npm audit
3ddb3b8 
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Oct 25, 2026
@nextcloud-command nextcloud-command added dependencies Pull requests that update a dependency file 3. to review labels Oct 25, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@max-nextcloud max-nextcloud Awaiting requested review from max-nextcloud max-nextcloud is a code owner
@mejo- mejo- Awaiting requested review from mejo- mejo- is a code owner
@silverkszlo silverkszlo Awaiting requested review from silverkszlo silverkszlo is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nextcloud-command