fix: upgrade axios to 1.15.1, 0.31.1 (CVE-2026-42033)

[anupamme]

Summary

Upgrade axios from 1.15.0 to 1.15.1, 0.31.1 to fix CVE-2026-42033.

Vulnerability

Field	Value
ID	CVE-2026-42033
Severity	HIGH
Scanner	trivy
Rule	CVE-2026-42033
File	yarn.lock
Assessment	Likely exploitable

Description: axios: Axios: HTTP Transport Hijacking via Prototype Pollution

Evidence

Scanner confirmation: trivy rule CVE-2026-42033 flagged this pattern.

Production code: This file is in the production codebase, not test-only code.

Threat Model Context

This is a Node.js library - vulnerabilities affect downstream consumers who use this package.

Changes

• package.json
• yarn.lock

Behavior Preservation

The change is scoped to 2 files on the vulnerable path, and the project's existing tests still pass, so intended behavior is unchanged.

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

This change addresses a pattern flagged by static analysis. The code path handles user-influenced input and the fix reduces the attack surface against both manual and automated exploitation.

---

Automated security fix by OrbisAI Security

[vercel]

@anupamme is attempting to deploy a commit to the Cat Team on Vercel.

A member of the Team first needs to authorize it.