Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump axios to ^1.6.7 #52

Open
razvanphp opened this issue Feb 16, 2024 · 0 comments
Open

Bump axios to ^1.6.7 #52

razvanphp opened this issue Feb 16, 2024 · 0 comments

Comments

@razvanphp
Copy link

This library depends on a very old version of axios that is vulnerable, see npm audit output:

# npm audit report

axios  0.8.1 - 1.5.1
Severity: moderate
Axios Cross-Site Request Forgery Vulnerability - https://github.com/advisories/GHSA-wf5p-g6vw-rhxx
No fix available
node_modules/axios
  react-axios  *
  Depends on vulnerable versions of axios
  node_modules/react-axios

2 moderate severity vulnerabilities

Some issues need review, and may require choosing
a different dependency.

Can we bump the version and tag the release please?

Thank you!
R

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant