search

yakovkhalinsky / backblaze-b2

Node.js Library for the Backblaze B2 Storage Service
MIT License
189 stars 58 forks source link

removed vulnerability with axios dependency update #132

Closed ps73 closed 9 months ago

ps73 commented 10 months ago

axios 0.8.1 - 1.5.1 Severity: moderate Axios Cross-Site Request Forgery Vulnerability - https://github.com/advisories/GHSA-wf5p-g6vw-rhxx

ps73 commented 10 months ago

This PR fixes this by updating axios to newest version.

headlessme commented 9 months ago

@yakovkhalinsky could you merge this PR to resolve the axios vulnerability? Or @odensc?

headlessme commented 9 months ago

@yakovkhalinsky thanks for the quick resolution here! Could you also publish the latest to NPM?

yakovkhalinsky commented 9 months ago

@headlessme might take me a few days, I'm on holday at the moment :)

I'll have to set everything up to help with publishing to npm, it's a been a while since I've been involved directly with this repo, regardless I promise to get this done soon 👍

headlessme commented 9 months ago

Thanks! Have a nice holiday 🏝️

jracabado commented 9 months ago

@yakovkhalinsky sorry I had not seen this thread, I opened an issue related to this CVE: https://github.com/yakovkhalinsky/backblaze-b2/issues/133

ps73 commented 8 months ago

@yakovkhalinsky Is there any eta when this will be released to npm?