Audit report

This audit fix resolves 4 of the total 42 vulnerabilities found in your project.

Updated dependencies

• @cypress/request
• @nextcloud/eslint-config
• axios
• qs

Fixed vulnerabilities

@cypress/request #

• Caused by vulnerable dependency:
  • qs
• Affected versions: <=3.0.9
• Package usage:
  • node_modules/@cypress/request

@nextcloud/eslint-config #

• Caused by vulnerable dependency:
  • @eslint/json
• Affected versions: 9.0.0-rc.0 - 9.0.0-rc.2
• Package usage:
  • node_modules/@nextcloud/eslint-config

axios #

• Axios is vulnerable to DoS attack through lack of data size check
• Severity: high (CVSS 7.5)
• Reference: GHSA-4hjh-wcwx-xvwj
• Affected versions: 1.0.0 - 1.11.0
• Package usage:
  • node_modules/axios

qs #

• qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
• Severity: high (CVSS 7.5)
• Reference: GHSA-6rw7-vpxm-498p
• Affected versions: <6.14.1
• Package usage:
  • node_modules/@cypress/request/node_modules/qs
  • node_modules/qs