ENGRTF-2635 update axios to latest version - Githubissues

SynapseFI / SynapseNode

Node.js Client Library for SynapseFI REST V3.1 API | https://docs.synapsefi.com

MIT License

13 stars 36 forks source link

ENGRTF-2635 update axios to latest version #92

Closed Preston-C89-Chen closed 2 years ago

Preston-C89-Chen commented 2 years ago

Description

Axios 0.18.0 has Forgery(SSRF) Medium severityRegular Expression Denial of Service(ReDOS) High Severity exploits.

Updates

update Axios version to latest 0.25.0

Notes

compared breaking changes for all version leading up to 0.25.0
change log
there are no known issues for breaking changes
npm run test performs the same for axios 0.18.0 and 0.25.0
there are a lot of unit tests not running well, they should be fixed in future commits