Skip to content

chore: pin axios to exact version (security fix) - #21

Draft
Kolezhniuk with Copilot wants to merge 2 commits into
mainfrom
copilot/chore-axios-security-fix
Draft

chore: pin axios to exact version (security fix)#21
Kolezhniuk with Copilot wants to merge 2 commits into
mainfrom
copilot/chore-axios-security-fix

Conversation

Copilot AI commented Apr 1, 2026

Copy link
Copy Markdown
  • Find all package.json files with axios dependency
  • Remove ^ from axios version (^1.3.31.3.3)
  • Upgrade axios to 1.13.5 to fix all known CVEs (DoS via proto, DoS via data size, SSRF/credential leakage)
  • Update package-lock.json
  • PR open against main: chore: pin axios to exact version (security fix) #21

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants