silverbackis / ComponentsWebApp

API Platform and NuxtJS as the core frameworks for making component driven progressive web apps
https://cwa.silverbackwebapps.com
MIT License
23 stars 1 forks source link

[Snyk] Security upgrade @nuxtjs/axios from 5.12.0 to 5.12.2 #49

Open snyk-bot opened 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @nuxtjs/axios The new version differs by 17 commits.
  • 44ef193 chore: update CHANGELOG
  • d8bd168 chore(release): 5.12.2
  • 6dd299e docs: fix syntax highlight
  • 8fc02f7 chore: simplify readme
  • 3a2e427 fix: fix netlify.toml
  • 20c9dc3 chore: update badges
  • f09f5e6 chore: fix netlify.toml
  • d9dd5f2 chore: remove husky
  • 465fc56 chore: update issue template
  • 22c65a5 chore(ci): use github actions
  • 85840c6 chore(deps): update all non-major dependencies (#400)
  • ea4ea7e fix(types): extend Axios.AxiosRequestConfig with "progress" option (#408)
  • 4942979 refactor(plugin): use `const` for non-reassigned variables (#406)
  • 18c9735 docs: migrate docs to nuxt/content (#404)
  • f54490b chore(release): 5.12.1
  • e416654 chore(deps): update all dependencies
  • 2061721 fix(plugin): hide progress-bar on cancelled requests (#398)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic