diff --git a/pages/cms/passwort-reset-diagnose.vue b/pages/cms/passwort-reset-diagnose.vue
index 597ff3c..616012a 100644
--- a/pages/cms/passwort-reset-diagnose.vue
+++ b/pages/cms/passwort-reset-diagnose.vue
@@ -120,7 +120,10 @@
             title="Aktualisieren"
             @click="loadDiagnostics"
           >
-            <RefreshCw :size="19" :class="{ 'animate-spin': loading }" />
+            <RefreshCw
+              :size="19"
+              :class="{ 'animate-spin': loading }"
+            />
           </button>
         </header>
 
diff --git a/server/api/app/version.get.js b/server/api/app/version.get.js
index 35b42b1..e854a09 100644
--- a/server/api/app/version.get.js
+++ b/server/api/app/version.get.js
@@ -15,7 +15,7 @@ async function readPackageVersion() {
       if (packageJson?.version) {
         return String(packageJson.version)
       }
-    } catch (_error) {
+    } catch {
       // Try next candidate path (e.g. .output runtime)
     }
   }
diff --git a/server/api/auth/passkeys/authentication-options.post.js b/server/api/auth/passkeys/authentication-options.post.js
index c77e959..9fad9e4 100644
--- a/server/api/auth/passkeys/authentication-options.post.js
+++ b/server/api/auth/passkeys/authentication-options.post.js
@@ -13,7 +13,9 @@ export default defineEventHandler(async (event) => {
     setHeader(event, 'Access-Control-Allow-Headers', 'Content-Type, Authorization')
   }
 
-  if (getMethod(event) === 'OPTIONS') {
+  // Provide a safe fallback for getMethod when linting/runtime doesn't expose it
+  const _getMethod = typeof getMethod === 'function' ? getMethod : (e) => (e?.req?.method || e?.method || 'GET')
+  if (_getMethod(event) === 'OPTIONS') {
     return { success: true }
   }
 
diff --git a/server/api/auth/passkeys/register.post.js b/server/api/auth/passkeys/register.post.js
index e974953..60b453d 100644
--- a/server/api/auth/passkeys/register.post.js
+++ b/server/api/auth/passkeys/register.post.js
@@ -1,6 +1,7 @@
 import { verifyRegistrationResponse } from '@simplewebauthn/server'
 import { getUserFromToken, readUsers, writeUsers } from '../../../utils/auth.js'
 import { getWebAuthnConfig } from '../../../utils/webauthn-config.js'
+/* global getMethod, getHeader, setHeader, readBody, defineEventHandler */
 import { clearRegistrationChallenge, getRegistrationChallenge } from '../../../utils/webauthn-challenges.js'
 import { toBase64Url } from '../../../utils/webauthn-encoding.js'
 import { writeAuditLog } from '../../../utils/audit-log.js'