[nextcloud-command]

Audit report

This audit fix resolves 3 of the total 19 vulnerabilities found in your project.

Updated dependencies

• @vitest/coverage-istanbul
• dompurify
• vitest

Fixed vulnerabilities

@vitest/coverage-istanbul #

• Caused by vulnerable dependency:
  • vitest
• Affected versions: 2.1.0-beta.1 - 4.1.11
• Package usage:
  • node_modules/@vitest/coverage-istanbul

dompurify #

• DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes
• Severity: critical 🚨
• Reference: GHSA-cg2g-xh64-v4q7
• Affected versions: <=3.4.16
• Package usage:
  • node_modules/dompurify

vitest #

• Caused by vulnerable dependency:
  • @vitest/coverage-istanbul
  • @vitest/mocker
• Affected versions: 2.1.0-beta.1 - 4.1.11
• Package usage:
  • node_modules/vitest

[coderabbitai]

Important

Review skipped

We couldn't safely recover the incremental review. No full review was started, and the last reviewed checkpoint was preserved. Retry later, or explicitly request a full review by commenting @coderabbitai full review.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}