Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Update Axios - fix security vulnerability #30

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

grommett
Copy link

@grommett grommett commented Jan 5, 2021

This PR updates Axios to v0.21.1 to fix Server-Side Request Forgery reported by npm.

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High          │ Server-Side Request Forgery                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ axios                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.21.1                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ d4eb47c463686dba716203a95d8c212661058b7e97ccb8bd89abcdc6667… │
│               │ [dev]                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ d4eb47c463686dba716203a95d8c212661058b7e97ccb8bd89abcdc6667… │
│               │ > swagger-routes > axios                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1594                            │
└───────────────┴──────────────────────────────────────────────────────────────┘
  • npm test passes

@grommett
Copy link
Author

grommett commented Jan 5, 2021

Ha. Looks like I beat dependabot 😏

@flowfalls
Copy link

Hi, can this be merged? @mikestead, I use swagger-routes in production and would love to just do an npm audit fix rather than a fork of this npm package.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants