search

iTwin / imodels-clients

Monorepo for iModels API clients
MIT License
6 stars 2 forks source link

axios <1.6.0 security issue (CVE-2023-45857) #207

Closed GintV closed 7 months ago

GintV commented 9 months ago

https://nvd.nist.gov/vuln/detail/CVE-2023-45857 https://github.com/axios/axios/issues/6006

As per https://github.com/axios/axios/issues/6006#issuecomment-1781915655, axios should be updated to ^1.6.0

austeja-bentley commented 7 months ago

Current released version of clients uses axios 1.6.2. We will shortly release an update to use axios 1.6.4 to address CVE-2023-45857.