Skip to content

Commit df978a1

Browse files
authored
Address another potential security vulnerability w/ axios
See GHSA-4w2v-q235-vp99 ... Vulnerable versions: < 0.21.1 Patched version: 0.21.1 Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address. See also PR #18.
1 parent 6d5564b commit df978a1

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

tests/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
"private": true,
55
"license": "EPL-1.0",
66
"dependencies": {
7-
"axios": "^0.18.0",
7+
"axios": ">=0.21.1",
88
"d3": "3.5.17",
99
"jschart": "file:../jschart",
1010
"react": "^16.5.1",

0 commit comments

Comments
 (0)