dep: Bump axios to 0.24.0 and use follow-redirects >= 1.14.7 - Githubissues

nrkno / core-components

Accessible and lightweight Javascript components

https://static.nrk.no/core-components/latest/

MIT License

117 stars 10 forks source link

dep: Bump axios to 0.24.0 and use follow-redirects >= 1.14.7 #639

Closed skjalgepalg closed 2 years ago

skjalgepalg commented 2 years ago

Address CVE-2022-0155 https://github.com/advisories/GHSA-74fj-2j2h-c42q

Use latest available version of axios
Lock transient dependency follow-redirects >= 1.14.7