Skip to content

Commit 3bbe93f

Browse files
authored
Bump Axios to ^0.21.1 (#208)
This version fixes an SSRF vulnerability: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28168 The changelog since 0.20.0 seems reasonable: https://github.com/axios/axios/blob/a64050a6cfbcc708a55a7dc8030d85b1c78cdf38/CHANGELOG.md#0211-december-21-2020 Closes #200.
1 parent 6fa1db0 commit 3bbe93f

File tree

2 files changed

+7
-7
lines changed

2 files changed

+7
-7
lines changed

package-lock.json

Lines changed: 6 additions & 6 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
"types": "index.d.ts",
77
"dependencies": {
88
"@types/express-jwt": "0.0.42",
9-
"axios": "^0.20.0",
9+
"axios": "^0.21.1",
1010
"debug": "^4.1.0",
1111
"http-proxy-agent": "^4.0.1",
1212
"https-proxy-agent": "^5.0.0",

0 commit comments

Comments
 (0)