Open WilliamHolmes opened 9 months ago
A vulnerable version of the axios package is being included by cldr-data-downloader
https://www.cve.org/CVERecord?id=CVE-2023-45857
│ └─┬ cldr-data@36.0.1 │ └─┬ cldr-data-downloader@1.0.0-1 │ └── axios@0.26.1
Any update?
I guess there's a dependency on this ticket
A vulnerable version of the axios package is being included by cldr-data-downloader
https://www.cve.org/CVERecord?id=CVE-2023-45857