From 9ab5556d8417d20b964e68ddd5aa72fcb4df1152 Mon Sep 17 00:00:00 2001 From: "A. Aurelions" Date: Tue, 15 Apr 2025 01:02:08 +0300 Subject: [PATCH] Depends on vulnerable versions of axios `# npm audit report` ```bash axios 1.0.0 - 1.8.1 Severity: high Server-Side Request Forgery in axios - https://github.com/advisories/GHSA-8hc4-vh64-cxmj axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL - https://github.com/advisories/GHSA-jr5f-v2jv-69x6 No fix available node_modules/axios @filebase/sdk * Depends on vulnerable versions of axios node_modules/@filebase/sdk 2 high severity vulnerabilities ``` --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 4183897..c9f29b8 100644 --- a/package.json +++ b/package.json @@ -54,7 +54,7 @@ "@helia/mfs": "3.0.1", "@helia/unixfs": "1.4.3", "@ipld/car": "5.2.4", - "axios": "1.6.2", + "axios": "1.8.4", "blockstore-fs": "1.1.10", "blockstore-core": "4.4.1", "datastore-core": "9.2.9",