feat(core): Upgrade axios and follow-redirects to address CVE-2023-26159

(#8366)
n8n-io · Jan 17, 2024 · 3912c5e · 3912c5e
1 parent 639d347
commit 3912c5e
Show file tree

Hide file tree

Showing 5 changed files with 44 additions and 33 deletions.
diff --git a/packages/@n8n/client-oauth2/package.json b/packages/@n8n/client-oauth2/package.json
@@ -20,6 +20,6 @@
     "dist/**/*"
   ],
   "dependencies": {
-    "axios": "1.6.2"
+    "axios": "1.6.5"
   }
 }
diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -109,7 +109,7 @@
     "@rudderstack/rudder-sdk-node": "1.0.6",
     "@sentry/integrations": "7.87.0",
     "@sentry/node": "7.87.0",
-    "axios": "1.6.2",
+    "axios": "1.6.5",
     "basic-auth": "2.0.1",
     "bcryptjs": "2.4.3",
     "bull": "4.12.1",

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -50,7 +50,7 @@
   "dependencies": {
     "@n8n/client-oauth2": "workspace:*",
     "aws4": "1.11.0",
-    "axios": "1.6.2",
+    "axios": "1.6.5",
     "concat-stream": "2.0.0",
     "cron": "1.7.2",
     "fast-glob": "3.2.12",

diff --git a/packages/editor-ui/package.json b/packages/editor-ui/package.json
@@ -47,7 +47,7 @@
     "@n8n/permissions": "workspace:*",
     "@vueuse/components": "^10.5.0",
     "@vueuse/core": "^10.5.0",
-    "axios": "^1.6.2",
+    "axios": "1.6.5",
     "chart.js": "^4.4.0",
     "codemirror-lang-html-n8n": "^1.0.0",
     "codemirror-lang-n8n-expression": "^0.2.0",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml