User tests: Successful: Unsuccessful:
Pull Request resolves # .
This pull request (PR) fixes one high severity security vulnerability in the indirect NPM non-development dependency "flatted" reported by npm audit by using npm audit fix.
it is the same as PR #47406 for 5.4-dev.
In the 6.0-dev branch this has already been done with commit a305da2 in the upmerge PR #47402 .
It needs a development environment with a git clone, composer and npm.
composer install and npm ci.npm audit.# npm audit report
flatted <3.4.0
Severity: high
flatted vulnerable to unbounded recursion DoS in parse() revive phase - https://github.com/advisories/GHSA-25h7-pfq9-p65f
fix available via `npm audit fix`
node_modules/flatted
1 high severity vulnerability
To address all issues, run:
npm audit fix
found 0 vulnerabilities
Please select:
Documentation link for guide.joomla.org:
No documentation changes for guide.joomla.org needed
Pull Request link for manual.joomla.org:
No documentation changes for manual.joomla.org needed
| Status | New | ⇒ | Pending |
| Category | ⇒ | NPM Change |
| Title |
|
||||||
@tecpromotion @HLeithner Feel free to close this PR if you will do it yourself e.g. with a general NPM update.
| Status | Pending | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2026-03-17 12:58:32 |
| Closed_By | ⇒ | tecpromotion | |
| Labels |
Added:
NPM Resource Changed
PR-6.1-dev
|
||
Thanks @richard67 and @brianteeman
I have tested this item ✅ successfully on 786c03f
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/47407.