From fac06b60a49323c13e99bb2174e0a2cfa277c549 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Thu, 30 Jul 2026 03:39:05 +0000
Subject: [PATCH] fix: CVE-2025-27152 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package-lock.json | 60 ++++++++++++++++++++++++++++++-----------------
 package.json      |  3 ++-
 2 files changed, 41 insertions(+), 22 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 26a077b..05a80f0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "welcome",
-	"version": "1.4.0",
+	"version": "3.0.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "welcome",
-			"version": "1.4.0",
+			"version": "3.0.0",
 			"license": "AGPL-3.0",
 			"dependencies": {
 				"@nextcloud/auth": "^2.5.1",
@@ -18,6 +18,7 @@
 				"@nextcloud/router": "^3.0.1",
 				"@nextcloud/vue": "^9.6.0",
 				"@nextcloud/vue-dashboard": "^2.0.1",
+				"axios": "^1.8.2",
 				"vue": "^3.5.32",
 				"vue-material-design-icons": "^5.3.1"
 			},
@@ -2812,6 +2813,27 @@
 				"node": "^20.0.0 || ^22.0.0 || ^24.0.0"
 			}
 		},
+		"node_modules/@nextcloud/axios/node_modules/axios": {
+			"version": "1.19.0",
+			"resolved": "https://registry.npmjs.org/axios/-/axios-1.19.0.tgz",
+			"integrity": "sha512-ht/iuYZXEjFxLH/Hkezgd7m6JKlHHXEUSneaDz8uZe1Gj5QZtCnpyDsckvAiEnT89OEbCLmnte4R4sn7P0EKFw==",
+			"license": "MIT",
+			"dependencies": {
+				"follow-redirects": "^1.16.0",
+				"form-data": "^4.0.6",
+				"https-proxy-agent": "^5.0.1",
+				"proxy-from-env": "^2.1.0"
+			}
+		},
+		"node_modules/@nextcloud/axios/node_modules/proxy-from-env": {
+			"version": "2.1.0",
+			"resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz",
+			"integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==",
+			"license": "MIT",
+			"engines": {
+				"node": ">=10"
+			}
+		},
 		"node_modules/@nextcloud/babel-config": {
 			"version": "1.3.0",
 			"resolved": "https://registry.npmjs.org/@nextcloud/babel-config/-/babel-config-1.3.0.tgz",
@@ -6180,15 +6202,14 @@
 			}
 		},
 		"node_modules/axios": {
-			"version": "1.17.0",
-			"resolved": "https://registry.npmjs.org/axios/-/axios-1.17.0.tgz",
-			"integrity": "sha512-J8SwNxprqqpbfenehxWYXE7CW+wM1BB4w3+N+g+/Wx40xM4rsLrfPmHHxSWIxJLYDgSY/HqlFPIYb2/S3rxafw==",
+			"version": "1.8.2",
+			"resolved": "https://registry.npmjs.org/axios/-/axios-1.8.2.tgz",
+			"integrity": "sha512-ls4GYBm5aig9vWx8AWDSGLpnpDQRtWAfrjU+EuytuODrFBkqesN2RkOQCBzrA1RQNHw1SmRMSDDDSwzNAYQ6Rg==",
 			"license": "MIT",
 			"dependencies": {
-				"follow-redirects": "^1.16.0",
-				"form-data": "^4.0.5",
-				"https-proxy-agent": "^5.0.1",
-				"proxy-from-env": "^2.1.0"
+				"follow-redirects": "^1.15.6",
+				"form-data": "^4.0.0",
+				"proxy-from-env": "^1.1.0"
 			}
 		},
 		"node_modules/babel-loader": {
@@ -9585,16 +9606,16 @@
 			}
 		},
 		"node_modules/form-data": {
-			"version": "4.0.5",
-			"resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
-			"integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
+			"version": "4.0.6",
+			"resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz",
+			"integrity": "sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==",
 			"license": "MIT",
 			"dependencies": {
 				"asynckit": "^0.4.0",
 				"combined-stream": "^1.0.8",
 				"es-set-tostringtag": "^2.1.0",
-				"hasown": "^2.0.2",
-				"mime-types": "^2.1.12"
+				"hasown": "^2.0.4",
+				"mime-types": "^2.1.35"
 			},
 			"engines": {
 				"node": ">= 6"
@@ -14091,13 +14112,10 @@
 			}
 		},
 		"node_modules/proxy-from-env": {
-			"version": "2.1.0",
-			"resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz",
-			"integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==",
-			"license": "MIT",
-			"engines": {
-				"node": ">=10"
-			}
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
+			"integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==",
+			"license": "MIT"
 		},
 		"node_modules/public-encrypt": {
 			"version": "4.0.3",
diff --git a/package.json b/package.json
index 15a9f5f..a4298fa 100644
--- a/package.json
+++ b/package.json
@@ -33,7 +33,7 @@
 	],
 	"engines": {
 		"node": "^24.0.0",
-   		"npm": "^11.3.0"
+		"npm": "^11.3.0"
 	},
 	"dependencies": {
 		"@nextcloud/auth": "^2.5.1",
@@ -45,6 +45,7 @@
 		"@nextcloud/router": "^3.0.1",
 		"@nextcloud/vue": "^9.6.0",
 		"@nextcloud/vue-dashboard": "^2.0.1",
+		"axios": "^1.8.2",
 		"vue": "^3.5.32",
 		"vue-material-design-icons": "^5.3.1"
 	},