Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update axios to 1.x #859

Closed
edi9999 opened this issue Nov 21, 2023 · 3 comments
Closed

Update axios to 1.x #859

edi9999 opened this issue Nov 21, 2023 · 3 comments

Comments

@edi9999
Copy link
Contributor

edi9999 commented Nov 21, 2023

When running npm audit, we get following error :

axios  0.8.1 - 1.5.1
Severity: moderate
Axios Cross-Site Request Forgery Vulnerability - https://github.com/advisories/GHSA-wf5p-g6vw-rhxx
fix available via `npm audit fix --force`
Will install selenium-standalone@9.0.5, which is a breaking change
node_modules/selenium-standalone/node_modules/axios
  selenium-standalone  >=9.0.6
  Depends on vulnerable versions of axios
  node_modules/selenium-standalone

2 moderate severity vulnerabilities

Upgrading axios to 1.x in selenium-standalone would fix this issue.

@christian-bromann
Copy link
Member

@edi9999 mind raising a PR for it?

@udarrr udarrr closed this as completed in b55e398 Jan 13, 2024
udarrr added a commit that referenced this issue Jan 13, 2024
@tuortheblessed
Copy link

@christian-bromann Getting this as well and its blocking our pipelines. Looks like this was never released, any chance we could get that released asap?

@tuortheblessed
Copy link

@udarrr Or maybe you can help here?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants