User tests: Successful: Unsuccessful:
Pull Request for Issue # .
This pull request (PR) fixes one low severity security vulnerability in NPM dependencies reported by npm audit by using npm audit fix.
@Bodge-IT @softforge @muhme In opposite to my previous PRs of this kind there is no corresponding PR in the 5.4-dev branch this time because in 5.4-dev it would mean a major update of the "diff dependency".
@HLeithner @tecpromotion In 6.1-dev the changes from this PR here have already been made with the last NPM dependency update, so simply ignore the changes when doing your upmerge after this PR here has been merged into 6.0-dev.
It needs a development environment with a git clone, composer and npm.
composer install and npm ci.npm audit.# npm audit report
diff <8.0.3
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch - https://github.com/advisories/GHSA-73rr-hh4g-fpgx
fix available via `npm audit fix`
node_modules/diff
1 low severity vulnerability
To address all issues, run:
npm audit fix
found 0 vulnerabilities
Please select:
Documentation link for docs.joomla.org:
No documentation changes for docs.joomla.org needed
Pull Request link for manual.joomla.org:
No documentation changes for manual.joomla.org needed
| Status | New | ⇒ | Pending |
| Category | ⇒ | NPM Change |
I have tested this item ✅ successfully on 25a59c1
Tested based on git clone
npm audit fix by own and saved package-lock.json filegh pr checkout 46713package-lock.json files are identicalnpm audit found 0 vulnerabilities| Status | Pending | ⇒ | Ready to Commit |
RTC
| Labels |
Added:
RTC
NPM Resource Changed
bug
PR-6.0-dev
|
||
| Status | Ready to Commit | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2026-01-20 11:43:29 |
| Closed_By | ⇒ | Bodge-IT |
Thanks @richard67 for the fix and @brianteeman & @muhme for testing
I have tested this item ✅ successfully on 25a59c1
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46713.