New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

- Upgrade Axios into 0.21.1 #18

Closed

xenovon opened this issue Jan 7, 2021 · 2 comments

xenovon commented Jan 7, 2021

I got a build error because Axios that this package use is still using Axios 0.19, which has an SSRF vulnerability.

This security hole is fixed in the latest version of Axios: axios/axios#3410

Do you mind to update the Axios version to 0.21.1?

Owner

zhaosiyang commented Jan 10, 2021

Done and published v1.1.6. Thank you

zhaosiyang closed this as completed

Author

xenovon commented Jan 14, 2021

Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment