Automattic / vip-cli

The VIP-CLI

https://docs.wpvip.com/vip-cli/

MIT License

58 stars 17 forks source link

security: fix high severity CVE-2024-39338 in `axios` #1994

Closed sjinks closed 3 months ago

sjinks commented 3 months ago

Description

Ref: https://github.com/advisories/GHSA-8hc4-vh64-cxmj

Pull request checklist

[ ] Update SETUP.md with any new environmental variables.
[ ] Update the documentation.
[x] Manually test the relevant changes.
[x] Follow the pull request checklist
[ ] Add/update automated tests as needed.

New release checklist

[ ] Automated tests pass.
[ ] The Preparing for release checklist is completed.

Steps to Test

CI must pass.

github-actions[bot] commented 3 months ago

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details

Scanned Manifest Files

sonarcloud[bot] commented 3 months ago

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud