search

intercom / intercom-node

Node.js bindings for the Intercom API
https://developers.intercom.com
Other
362 stars 116 forks source link

Axios dependency version has critical vulnerability CVE-2023-45857 #386

Closed headlessme closed 7 months ago

headlessme commented 8 months ago

This module currently depends on axios version 0.24.0 (Oct 2021), latest is 1.6.1 (2 days ago) which fixes this critical vulnerability: https://github.com/advisories/GHSA-wf5p-g6vw-rhxx

jracabado commented 7 months ago

@colmdoyle can we get a npm release with the patch merged in https://github.com/intercom/intercom-node/pull/388?

colmdoyle commented 7 months ago

V5.0.0 contains this patch now.