Closed jef closed 3 years ago
npmjs is reporting a vulnerability with <= axio@0.21.0. Are you able to bump node-hue-api to 4.0.10 with these changes before you release 5.0.0?
<= axio@0.21.0
┌──────────────────────────────────────────────────────────────────────────────┐ │ Manual Review │ │ Some vulnerabilities require your attention to resolve │ │ │ │ Visit https://go.npm.me/audit-guide for additional guidance │ └──────────────────────────────────────────────────────────────────────────────┘ ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ High │ Server-Side Request Forgery │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ axios │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ >=0.21.1 │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ node-hue-api │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ node-hue-api > axios │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://npmjs.com/advisories/1594 │ └───────────────┴──────────────────────────────────────────────────────────────┘
Thanks!
4.0.10 has been published to the npm registry with the fixes applied
4.0.10
Description
npmjs is reporting a vulnerability with
<= axio@0.21.0
. Are you able to bump node-hue-api to 4.0.10 with these changes before you release 5.0.0?Thanks!