Open Lexiel46 opened 3 weeks ago
The npm package axios, versions 1.3.2 to 1.7.3, has been reported to have a high-severity vulnerability - Server-Side Request Forgery.
1.3.2
1.7.3
sendgrid-client is currently configured with axios 1.6.8
sendgrid-client
axios 1.6.8
To avoid using vulnerable versions of axios, I suggest updating axios to the lastest version, 1.7.4.
1.7.4
Same issue here, flagged by Mend during the build process
CVE-2024-39338
The npm package axios, versions
1.3.2
to1.7.3
, has been reported to have a high-severity vulnerability - Server-Side Request Forgery.sendgrid-client
is currently configured withaxios 1.6.8
To avoid using vulnerable versions of axios, I suggest updating axios to the lastest version,
1.7.4
.