Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update axios dependency to pick up vulnerability #287

Closed
eithe opened this issue Jan 26, 2022 · 3 comments · Fixed by #288
Closed

Update axios dependency to pick up vulnerability #287

eithe opened this issue Jan 26, 2022 · 3 comments · Fixed by #288
Labels

Comments

@eithe
Copy link
Contributor

eithe commented Jan 26, 2022

The follow-redirects package which is a dependency of axios 0.21.4 is vulnerable; GHSA-74fj-2j2h-c42q.

Any chance you could update the axios dependency all the way to latest 0.25.0?

@ardasatata
Copy link

I've forked the repo and tried to update the axios, seems working properly & the test case doesn't seems to have any problem.

These are the dependencies that I update in my repo

"axios": "^0.25.0",
"@types/node": "15.6.1",
"typescript": "3.9.4"

here is the link to the package.json :
package.json

hope it helps 🙏

@eithe
Copy link
Contributor Author

eithe commented Feb 9, 2022

@ardasatata Perhaps (if you have time) you could submit a PR for this? Last time there was a similar case the PR was accepted I believe.

@infinitered-circleci
Copy link

🎉 This issue has been resolved in version 3.0.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants