sendgrid / sendgrid-nodejs

The Official Twilio SendGrid Led, Community Driven Node.js API Library

https://sendgrid.com

MIT License

2.98k stars 781 forks source link

chore: fixed axios vulnerability by upgrading 1.6.8 to 1.7.4 #1415

Open jl-yang opened 3 weeks ago

jl-yang commented 3 weeks ago

Fixes

this fixes recent CVE-2024-39338 Server-Side Request Forgery in axios (https://github.com/advisories/GHSA-8hc4-vh64-cxmj)
Checklist
- [x] I acknowledge that all my contributions will be made under the project's license
- [ ] I have made a material change to the repo (functionality, testing, spelling, grammar)
- [x] I have read the Contribution Guidelines and my PR follows them
- [x] I have titled the PR appropriately
- [x] I have updated my branch with the main branch
- [ ] I have added tests that prove my fix is effective or that my feature works
- [ ] I have added the necessary documentation about the functionality in the appropriate .md file
- [ ] I have added inline documentation to the code I modified

If you have questions, please file a support ticket.

DinerIsmail commented 2 weeks ago

Can this be merged please? 🙏🏻