search

contentful / contentful-management.js

JavaScript library for Contentful's Management API (node & browser)
https://contentful.github.io/contentful-management.js
MIT License
266 stars 98 forks source link

Upgrade axios to 1.6.4 or later to fix vulnerabilities #2251

Open LeichtF opened 4 months ago

LeichtF commented 4 months ago

Currently axios 1.6.2 is used, which has a formToJSON prototype pollution vulnerability (and requires a vulnerable version of follow-redirects).

These issues have been fixed in version 1.6.4.

I propose to either update to that version or the latest, which is currently 1.6.8.