search

pluralsight / web-dev-starter

302 stars 509 forks source link

Update axios package in package-lock.json #15

Open mohamadali-halwani opened 3 years ago

mohamadali-halwani commented 3 years ago

The previous version, 0.19.0, had an SSRF vulnerability that was fixed in the version 0.21.1

mohamadali-halwani commented 3 years ago

As a user, if you just want to use this for educational purpose, use the tag --no-audit so it looks like this npm install lite-server --save-dev --no-audit then update the package npm update axios