Closed AndrewMax closed 1 year ago
This should be merged sooner rather than later
Thank you!
@jeffbski Can this get some attention please? Thanks a lot.
For more context: CVE-2023-45857 (CWE-359) XSRF-TOKEN value is disclosed to an unauthorised actor, fixed in axios 1.6.0.
And update and a subsequent release would be great!
Guess we'll just have to wait-on this PR.
Tested locally and worked perfectly 🚀
I hope this gets merged soon and then released! Looking forward...
Thanks @AndrewMax for the PR and for those that confirmed it. It is published to wait-on@7.2.0
Axios was recently updated to fix CVE-2023-45857. This PR is to update to axios 1.6.0.