nextcloud / firstrunwizard

🔮 The first impression matters. The firstrunwizard is the first Nextcloud impression.

45 stars 47 forks source link

[master] Fix npm audit #1300

Closed nextcloud-command closed 4 months ago

nextcloud-command commented 4 months ago

Audit report

This audit fix resolves 2 of the total 6 vulnerabilities found in your project.

Updated dependencies

fast-xml-parser
vue-tsc
Fixed vulnerabilities

fast-xml-parser #

fast-xml-parser vulnerable to ReDOS at currency parsing
Severity: high (CVSS 7.5)
Reference: https://github.com/advisories/GHSA-mpg4-rc92-vx8v
Affected versions: <4.4.1
Package usage:
- node_modules/fast-xml-parser

vue-tsc #

Caused by vulnerable dependency:
- @vue/language-core
Affected versions: 1.7.0-alpha.0 - 2.0.28
Package usage:
- node_modules/vue-tsc