Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix security vulnerability in axios and update dependencies #387

Open
LeichtF opened this issue May 23, 2024 · 3 comments
Open

fix security vulnerability in axios and update dependencies #387

LeichtF opened this issue May 23, 2024 · 3 comments

Comments

@LeichtF
Copy link

LeichtF commented May 23, 2024

Do you want to request a feature or report a bug?
bug

What is the current behavior?

  • axios < 1.6.8 has various security vulnerabilities
  • most of the other dependencies are outdated

If the current behavior is a bug, please provide the steps to reproduce.

What is the expected behavior?

If this is a feature request, what is motivation or use case for changing the behavior?

Please mention other relevant information.

  • node version 10.24.1
  • npm version [email protected]
  • Operating system
  • bundlesize version 0.18.2
  • CI you are using
@falsyvalues
Copy link

falsyvalues commented Jun 27, 2024

Resolved Partially resolved in #382

@LeichtF
Copy link
Author

LeichtF commented Jun 27, 2024

@falsyvalues I disagree. #382 upgraded axios from 0.21.1 to 1.6.2 and github-build from 1.2.2 to 1.2.4.
#388 is taking care of more packages and also upgrades to newer versions. axios should be upgraded to 1.6.4 or above to include the latest security fixes (see release notes for axios 1.6.4)

edit: axios v.1.6.8 adds another security fix

@falsyvalues
Copy link

@LeichtF Oh, let me correct that. Anyway its up to maintainer if he wants to be on the edge with other dependencies.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants