[GH-ISSUE #467] Security Alert: 3 npm vulnerabilities found #291

New issue

Closed

opened 2026-05-06 12:27:57 +02:00 by BreizhHardware · 1 comment

BreizhHardware commented

2026-05-06 12:27:57 +02:00

Owner

Originally created by @github-actions[bot] on GitHub (Feb 20, 2026).
Original GitHub issue: https://github.com/maziggy/bambuddy/issues/467

Automated Security Audit Results

The weekly security audit found vulnerabilities in npm dependencies.

Package	Severity	Via	Fix
minimatch	high	minimatch	Yes
npm	high	minimatch, tar	Yes
tar	high	tar	Yes

Recommended Actions

Review each vulnerability: npm audit
Auto-fix if possible: npm audit fix
Manual fix for breaking changes: npm audit fix --force (review changes!)
Close this issue when resolved

This issue was automatically created by the security audit workflow.

Originally created by @github-actions[bot] on GitHub (Feb 20, 2026). Original GitHub issue: https://github.com/maziggy/bambuddy/issues/467 ## Automated Security Audit Results The weekly security audit found vulnerabilities in npm dependencies. | Package | Severity | Via | Fix | |---------|----------|-----|-----| | minimatch | high | minimatch | Yes | | npm | high | minimatch, tar | Yes | | tar | high | tar | Yes | ### Recommended Actions 1. Review each vulnerability: `npm audit` 2. Auto-fix if possible: `npm audit fix` 3. Manual fix for breaking changes: `npm audit fix --force` (review changes!) 4. Close this issue when resolved --- *This issue was automatically created by the security audit workflow.*

BreizhHardware

2026-05-06 12:27:57 +02:00

closed this issue
added the
security

automated

dependencies
labels

BreizhHardware commented

2026-05-06 12:27:58 +02:00

Author

Owner

@github-actions[bot] commented on GitHub (Feb 20, 2026):

All npm production vulnerabilities have been resolved. Closing automatically.

@github-actions[bot] commented on GitHub (Feb 20, 2026): All npm production vulnerabilities have been resolved. Closing automatically.

BreizhHardware referenced this issue

2026-05-06 12:34:24 +02:00

[PR #324] [MERGED] v0.1.9 #997