NPM Resource Changed bug PR-6.0-dev Pending

User tests: Successful: Unsuccessful:

avatar richard67
richard67
19 Dec 2025

Pull Request for Issue # .

Summary of Changes

This pull request (PR) fixes two high severity security vulnerability in NPM development dependencies reported by npm audit by using npm audit fix.

Same as PR #46590 for 5.4-dev, but here for 6.0-dev to avoid ugly merge conflicts for the upmerge after that.

Testing Instructions

It needs a development environment with a git clone, composer and npm.

  1. If not done before, run composer install and npm ci.
  2. Run npm audit.
  3. Check the result.

Actual result BEFORE applying this Pull Request

# npm audit report

systeminformation  <5.27.14
Severity: high
systeminformation has a Command Injection vulnerability in fsSize() function on Windows - https://github.com/advisories/GHSA-wphj-fx3q-84ch
fix available via `npm audit fix`
node_modules/systeminformation
  cypress  15.1.0 - 15.8.0
  Depends on vulnerable versions of systeminformation
  node_modules/cypress

2 high severity vulnerabilities

To address all issues, run:
  npm audit fix

Expected result AFTER applying this Pull Request

found 0 vulnerabilities

Link to documentations

Please select:

  • Documentation link for docs.joomla.org:

  • No documentation changes for docs.joomla.org needed

  • Pull Request link for manual.joomla.org:

  • No documentation changes for manual.joomla.org needed

avatar richard67 richard67 - open - 19 Dec 2025
avatar richard67 richard67 - change - 19 Dec 2025
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 19 Dec 2025
Category NPM Change
avatar richard67 richard67 - change - 19 Dec 2025
The description was changed
avatar richard67 richard67 - edited - 19 Dec 2025
avatar brianteeman brianteeman - test_item - 19 Dec 2025 - Tested successfully
avatar brianteeman
brianteeman - comment - 19 Dec 2025

I have tested this item ✅ successfully on 38fe743


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46591.

avatar Bodge-IT Bodge-IT - test_item - 19 Dec 2025 - Tested successfully
avatar Bodge-IT
Bodge-IT - comment - 19 Dec 2025

I have tested this item ✅ successfully on 38fe743


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46591.

avatar softforge softforge - change - 19 Dec 2025
Status Pending Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 2025-12-19 13:12:19
Closed_By softforge
Labels Added: NPM Resource Changed bug PR-6.0-dev
avatar softforge softforge - close - 19 Dec 2025
avatar softforge softforge - merge - 19 Dec 2025
avatar softforge
softforge - comment - 19 Dec 2025

Thank you @richard67 and the testers.

Add a Comment

Login with GitHub to post a comment