Skip to content

Commit b668751

Browse files
Cascade Botclaude
andcommitted
fix(deps): override axios to 1.15.0 to resolve critical SSRF vulnerability
Adds npm overrides entry to force axios>=1.15.0 across transitive dependencies (jira.js, trello.js), resolving GHSA-3p68-rc4w-qgx5 and GHSA-fvcv-3m26-pcqx that were failing the CI npm audit check. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent c0fc357 commit b668751

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -134,6 +134,7 @@
134134
"overrides": {
135135
"lodash": "^4.18.1",
136136
"lodash-es": "^4.18.1",
137-
"brace-expansion": "^2.0.3"
137+
"brace-expansion": "^2.0.3",
138+
"axios": "^1.15.0"
138139
}
139140
}

0 commit comments

Comments
 (0)