Audit report

This audit fix resolves 3 of the total 46 vulnerabilities found in your project.

Updated dependencies

• @nextcloud/cypress
• dompurify
• vite

Fixed vulnerabilities

@nextcloud/cypress #

• Caused by vulnerable dependency:
  • cypress
• Affected versions:
• Package usage:
  • node_modules/@nextcloud/cypress

dompurify #

• DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound instanceof checks
• Severity: moderate (CVSS 6.1)
• Reference: GHSA-hpcv-96wg-7vj8
• Affected versions: <=3.4.12
• Package usage:
  • node_modules/dompurify

vite #

• launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows
• Severity: moderate
• Reference: GHSA-v6wh-96g9-6wx3
• Affected versions: 7.0.0 - 7.3.3
• Package usage:
  • node_modules/vite