Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update axios package from 1.4 to 1.7.7 to fix CVE-2024-39338 #15

Merged
merged 1 commit into from
Sep 19, 2024

Conversation

kirby81
Copy link
Collaborator

@kirby81 kirby81 commented Sep 19, 2024

Description:

This pull request updates the axios package from version 1.4 to 1.7.7 to address the security vulnerability identified as CVE-2024-39338. The vulnerability could potentially allow for unauthorized access or data leakage, and updating to the latest version mitigates this risk.

Changes:

  • Updated axios dependency in package.json from 1.4 to 1.7.7.
  • Ran npm install to update the package-lock.json file accordingly.

Testing:

  • Verified that the application builds successfully.
  • Ran existing unit tests to ensure no regressions were introduced.

References:

Resolve #14

@kirby81 kirby81 added the enhancement New feature or request label Sep 19, 2024
@kirby81 kirby81 requested a review from daolf September 19, 2024 08:33
@kirby81 kirby81 self-assigned this Sep 19, 2024
@kirby81 kirby81 merged commit 18485a5 into master Sep 19, 2024
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Please update axios dependency for dependency vulnerability
2 participants