-
Notifications
You must be signed in to change notification settings - Fork 38
Open
Description
Hi there,
there is this problem GHSA-wf5p-g6vw-rhxx with the axios version in this library.
Could it be upgrade it to some of the latest versions?
# npm audit report
axios <=1.8.1
Severity: high
Axios Cross-Site Request Forgery Vulnerability - https://github.com/advisories/GHSA-wf5p-g6vw-rhxx
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL - https://github.com/advisories/GHSA-jr5f-v2jv-69x6
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/openapi-validator/node_modules/axios
openapi-validator >=0.14.2-alpha.0
Depends on vulnerable versions of axios
node_modules/openapi-validator
I can try to issue a PR if you like
Metadata
Metadata
Assignees
Labels
No labels