[stable5.9] Fix npm audit

[nextcloud-command]

Audit report

This audit fix resolves 2 of the total 35 vulnerabilities found in your project.

Updated dependencies

• dompurify
• vitest

Fixed vulnerabilities

dompurify #

• DOMPurify: IN_PLACE mode trusts attacker-controlled nodeName on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects
• Severity: low
• Reference: GHSA-x4vx-rjvf-j5p4
• Affected versions: <=3.4.10
• Package usage:
  • node_modules/dompurify

vitest #

• When Vitest UI server is listening, arbitrary file can be read and executed
• Severity: critical 🚨 (CVSS 9.8)
• Reference: GHSA-5xrq-8626-4rwp
• Affected versions: <3.2.6
• Package usage:
  • node_modules/vitest