Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[dependencies] Axios Cross-Site Request Forgery Vulnerability #196

Open
Mansouri147 opened this issue Dec 21, 2023 · 1 comment
Open

[dependencies] Axios Cross-Site Request Forgery Vulnerability #196

Mansouri147 opened this issue Dec 21, 2023 · 1 comment
Assignees
@Stun3R
Labels
bug Something isn't working

Comments

@Mansouri147
Copy link

Hi,

Currently strapi-sdk-js relies on axios ^0.23.0. Recently, a CVE was published for axios versions <1.6.0 (see GHSA-wf5p-g6vw-rhxx). It would be great if 1.6.0 would at least be included as a supported version.

Thanks
@Mansouri147 Mansouri147 added the bug Something isn't working label Dec 21, 2023
@Stun3R
Copy link
Owner

Stun3R commented Nov 26, 2024

Hey 👋🏼
I will work on updating the axios deps in the following weeks (less than 2 weeks)

@Stun3R Stun3R self-assigned this Nov 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@Stun3R Stun3R

Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@Stun3R @Mansouri147