lazywithclass / winston-cloudwatch

Send logs to Amazon Cloudwatch using Winston.

MIT License

258 stars 104 forks source link

Help me to fix the below dependabot alert #223

Open mallikarjuna11421 opened 7 months ago

mallikarjuna11421 commented 7 months ago

npm audit report

axios 0.8.1 - 1.5.1 Severity: moderate Axios Cross-Site Request Forgery Vulnerability - https://github.com/advisories/GHSA-wf5p-g6vw-rhxx fix available via npm audit fix --force Will install bitly@4.1.1, which is a breaking change node_modules/bitly/node_modules/axios bitly >=7.0.0 Depends on vulnerable versions of axios node_modules/bitly

2 moderate severity vulnerabilities

To address all issues (including breaking changes), run: npm audit fix --force

mallikarjuna11421 commented 7 months ago

I have updated the axios latest version still having the same issue