[stable28] Fix npm audit

[nextcloud-command]

Audit report

This audit fix resolves 8 of the total 12 vulnerabilities found in your project.

Updated dependencies

• @nextcloud/axios
• axios
• babel-plugin-transform-es2015-modules-commonjs
• babel-template
• babel-traverse
• braces
• vue-jest
• ws

  Fixed vulnerabilities

@nextcloud/axios #

• Caused by vulnerable dependency:
  • axios
• Affected versions: <=2.3.0
• Package usage:
  • node_modules/@nextcloud/axios

axios #

• Axios Cross-Site Request Forgery Vulnerability
• Severity: moderate (CVSS 6.5)
• Reference: https://github.com/advisories/GHSA-wf5p-g6vw-rhxx
• Affected versions: 0.8.1 - 0.27.2
• Package usage:
  • node_modules/axios

babel-plugin-transform-es2015-modules-commonjs #

• Caused by vulnerable dependency:
  • babel-template
• Affected versions: <=7.0.0-beta.0
• Package usage:
  • node_modules/babel-plugin-transform-es2015-modules-commonjs

babel-template #

• Caused by vulnerable dependency:
  • babel-traverse
• Affected versions: *
• Package usage:
  • node_modules/babel-template

babel-traverse #

• Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
• Severity: critical 🚨 (CVSS 9.4)
• Reference: https://github.com/advisories/GHSA-67hx-6x53-jw92
• Affected versions: *
• Package usage:
  • node_modules/babel-traverse

braces #

• Uncontrolled resource consumption in braces
• Severity: high (CVSS 7.5)
• Reference: https://github.com/advisories/GHSA-grv7-fg5c-xmjg
• Affected versions: <3.0.3
• Package usage:
  • node_modules/braces

vue-jest #

• Caused by vulnerable dependency:
  • babel-plugin-transform-es2015-modules-commonjs
• Affected versions: 2.0.0 - 3.0.7
• Package usage:
  • node_modules/vue-jest

ws #

• ws affected by a DoS when handling a request with many HTTP headers
• Severity: high (CVSS 7.5)
• Reference: https://github.com/advisories/GHSA-3h5v-q93c-6h6q
• Affected versions: 8.0.0 - 8.17.0
• Package usage:
  • node_modules/ws