New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

bump axios version #483

Merged

sorenlouv merged 1 commit into sorenlouv:main from vinayak-kukreja:vkukreja/upgrade-dep

Dec 12, 2023

Contributor

vinayak-kukreja commented Dec 7, 2023 •

edited

Loading

Hey @sqren, I see there is a security notification for axios version being used in this repo.

An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

Bumping version to lowest patched version.


          bump axios version

1c4c96f

Signed-off-by: Vinayak Kukreja <[email protected]>

sorenlouv merged commit 0bbe4d1 into sorenlouv:main

3 of 4 checks passed

Owner

sorenlouv commented Dec 12, 2023

Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet