Need to update axios

[minerjed]

Severity: moderate
Axios Cross-Site Request Forgery Vulnerability - GHSA-wf5p-g6vw-rhxx
node_modules/axios
wait-on >=5.0.0-rc.0
Depends on vulnerable versions of axios
node_modules/wait-on

2 moderate severity vulnerabilities

[AndrewMax]

@minerjed I opened a PR four days ago to fix this.

[minerjed]

Sorry missed that. I thought axios needed to be updated to 1.6.1 but I see that 1.6.0 has been patched also.

[grenmath]

still not patched ?

[marioleed]

When is this released?

[wvanderdeijl]

Duplicate of #143

[wvanderdeijl]

Seems to be fixed in #147

[MikeMcC399]

@minerjed

• Would you like to close your issue which is resolved? I added a new issue for a newly discovered vulnerability Server-Side Request Forgery in axios (CVE-2024-39338) - update to axios 1.7.4 needed #159

[MikeMcC399]

• This issue is also resolved by update axios@1.7.4 and other minor #162, so it should be closed.

[rogervila]

There is another security issue, fixed in axios >= 1.8.2 version

CVE ID

• CVE-2025-27152

GHSA ID

• GHSA-jr5f-v2jv-69x6

More info here: axios/axios#6463

[rogervila]

There is another security issue, fixed in axios >= 1.8.2 version

CVE ID

• CVE-2025-27152

GHSA ID

• GHSA-jr5f-v2jv-69x6

More info here: axios/axios#6463

Fixed in #169