search

sorenlouv / backport

A simple CLI tool that automates the process of backporting commits on a GitHub repo
https://github.com/sqren/backport/blob/main/docs/config-file-options.md
Apache License 2.0
241 stars 57 forks source link

bump axios version #483

Closed vinayak-kukreja closed 6 months ago

vinayak-kukreja commented 6 months ago

Hey @sqren, I see there is a security notification for axios version being used in this repo.

An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

Bumping version to lowest patched version.

sorenlouv commented 6 months ago

Thank you!