valdisiljuconoks / localization-provider-core

Database driven localization provider for .NET applications (with administrative management UI)
Apache License 2.0
118 stars 22 forks source link

Axios Vulnerability #123

Closed jasonrahmcentury closed 11 months ago

jasonrahmcentury commented 1 year ago

A penetration test on our site discovered that the version of Axios being used in this project has a known vulnerability. Is there any way it can be updated? Here's the vulnerability: CVE-2021-3749 and the file where Axios is being added: https://github.com/valdisiljuconoks/localization-provider-core/blob/master/src/DbLocalizationProvider.AdminUI.AspNetCore/package.json

valdisiljuconoks commented 1 year ago

all frontend packages will be updated in next version drop. to be released soon at some point

valdisiljuconoks commented 11 months ago

fixed