Skip to content

Commit

Permalink
Upgraded Axios version
Browse files Browse the repository at this point in the history
- Current Axios version was 0.21.4, this version has CSRF vulnerability. Referring to this issue:
  axios/axios#6022, Axios contains a cross-site request forgery (CSRF) vulnerability due to insecure HTTP endpoint permission validation. An attacker could exploit this vulnerability by sending a crafted link to a victim to execute malicious actions on their behalf.
- v1.6.0 has fixed this problem, Upgraded the version to the same.
- Reference: axios/axios#6028

Signed-off-by: Nikhil Ashoka <a.nikhil@ibm.com>
Change-Id: I43719d2dd4524ad1de647f7753a6c923762e1e80
  • Loading branch information
Nikhil-Ashoka committed Mar 25, 2024
1 parent 02f9709 commit 63833da
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion package.json
Expand Up @@ -17,7 +17,7 @@
"dependencies": {
"@carbon/icons-vue": "10.28.0",
"@novnc/novnc": "1.2.0",
"axios": "0.21.4",
"axios": "1.6.0",
"bootstrap": "4.6.0",
"bootstrap-vue": "2.21.2",
"core-js": "3.9.1",
Expand Down

0 comments on commit 63833da

Please sign in to comment.