Skip to content

Commit 200abe6

Browse files
anupsvclaude
andcommitted
fix(security): patch critical vulns
Upgrade axios from 1.14.0 to 1.15.0 in cli and sdk packages to fix GHSA-3p68-rc4w-qgx5 (NO_PROXY hostname normalization bypass leading to SSRF). Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
1 parent 251c544 commit 200abe6

3 files changed

Lines changed: 9 additions & 9 deletions

File tree

packages/cli/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
"@napi-rs/keyring": "1.2.0",
1919
"@oclif/core": "4.8.0",
2020
"@oclif/plugin-autocomplete": "3.2.40",
21-
"axios": "1.14.0",
21+
"axios": "1.15.0",
2222
"chalk": "5.6.2",
2323
"cli-table3": "0.6.5",
2424
"dockerode": "4.0.9",

packages/sdk/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@
5050
"dependencies": {
5151
"@inquirer/prompts": "7.10.1",
5252
"@napi-rs/keyring": "1.2.0",
53-
"axios": "1.14.0",
53+
"axios": "1.15.0",
5454
"chalk": "5.6.2",
5555
"dockerode": "4.0.9",
5656
"form-data": "4.0.5",

pnpm-lock.yaml

Lines changed: 7 additions & 7 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)