-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Description
Currently axios is required at ^0.18.0.
Line 9 in 80560d8
| "axios": "^0.18.0", |
However, there is a current high-severity advisory for axios:
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high │ Server-Side Request Forgery │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.21.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eclint │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ eclint > gulp-reporter > axios │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1594 │
└───────────────┴──────────────────────────────────────────────────────────────┘
Please update the axios dependency to >=0.21.1 (or more specifically, ^0.21.1).
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels