Skip to content

Commit 10ad972

Browse files
authored
Address potential security vulnerability w/ axios
See GHSA-4w2v-q235-vp99 ... Vulnerable versions: `< 0.21.1` Patched version: `0.21.1` Axios NPM package `0.21.0` contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address.
1 parent 04bf133 commit 10ad972

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

cdm-tests/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
"private": true,
55
"license": "EPL-1.0",
66
"dependencies": {
7-
"axios": "^0.18.0",
7+
"axios": ">=0.21.1",
88
"d3": "3.5.17",
99
"jschart": "file:../jschart",
1010
"react": "^16.5.1",

0 commit comments

Comments
 (0)