-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Description
Currently axios
is required at ^0.18.0
.
Line 9 in 80560d8
"axios": "^0.18.0", |
However, there is a current high-severity advisory for axios
:
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high │ Server-Side Request Forgery │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.21.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eclint │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eclint > gulp-reporter > axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1594 │
└───────────────┴──────────────────────────────────────────────────────────────┘
Please update the axios
dependency to >=0.21.1
(or more specifically, ^0.21.1
).
hibikikudo
Metadata
Metadata
Assignees
Labels
No labels