Skip to content
This repository was archived by the owner on Mar 20, 2024. It is now read-only.

Conversation

@BHouwens
Copy link
Contributor

@BHouwens BHouwens commented Jan 3, 2024

Description

Updates the module's Axios dependency to resolve the discovered CSRF vulnerability in earlier versions of the package.

Fixes # 2282582 in HackerOne code audit

Type of Change

Please mark the appropriate option by putting an "x" inside the brackets:

  • Bug fix
  • New feature
  • Enhancement or optimization
  • Documentation update
  • Other (please specify)

Checklist

Put an "x" in the boxes that apply. If you're unsure about any of these, don't hesitate to ask. We're here to help!

  • I have tested the changes locally and they work as expected.
  • I have added necessary documentation or updated existing documentation.
  • My code follows the project's coding standards and style guidelines.
  • I have added/updated relevant tests to ensure the changes are properly covered.
  • I have checked for and resolved any merge conflicts.
  • My commits have clear and descriptive messages.

@BHouwens BHouwens force-pushed the secfix_axios_vulnerability branch from ffcd9ff to f8e3275 Compare January 3, 2024 14:29
@BHouwens BHouwens merged commit 51b6188 into develop Jan 3, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants