User tests: Successful: Unsuccessful:
Pull Request for Issue # .
This pull request (PR) fixes two high severity security vulnerability in NPM development dependencies reported by npm audit by using npm audit fix.
Same as PR #46590 for 5.4-dev, but here for 6.0-dev to avoid ugly merge conflicts for the upmerge after that.
It needs a development environment with a git clone, composer and npm.
composer install and npm ci.npm audit.# npm audit report
systeminformation <5.27.14
Severity: high
systeminformation has a Command Injection vulnerability in fsSize() function on Windows - https://github.com/advisories/GHSA-wphj-fx3q-84ch
fix available via `npm audit fix`
node_modules/systeminformation
cypress 15.1.0 - 15.8.0
Depends on vulnerable versions of systeminformation
node_modules/cypress
2 high severity vulnerabilities
To address all issues, run:
npm audit fix
found 0 vulnerabilities
Please select:
Documentation link for docs.joomla.org:
No documentation changes for docs.joomla.org needed
Pull Request link for manual.joomla.org:
No documentation changes for manual.joomla.org needed
| Status | New | ⇒ | Pending |
| Category | ⇒ | NPM Change |
I have tested this item ✅ successfully on 38fe743
| Status | Pending | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2025-12-19 13:12:19 |
| Closed_By | ⇒ | softforge | |
| Labels |
Added:
NPM Resource Changed
bug
PR-6.0-dev
|
||
Thank you @richard67 and the testers.
I have tested this item ✅ successfully on 38fe743
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46591.