From a7e12c794e17be4fdb74f426aa8aaafa73c3528d Mon Sep 17 00:00:00 2001 From: Mark Fulton Date: Tue, 14 Nov 2023 13:50:13 -0600 Subject: [PATCH] fix(axios): csrf vulnerability (#2055) upgrade to address https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459 fixes #2046 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 462fd869d..3c6485ff3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10,7 +10,7 @@ "license": "MIT", "dependencies": { "@contentful/rich-text-types": "^16.0.2", - "axios": "^1.4.0", + "axios": "^1.6.0", "contentful-resolve-response": "^1.8.1", "contentful-sdk-core": "^8.1.0", "json-stringify-safe": "^5.0.1", @@ -3958,9 +3958,9 @@ } }, "node_modules/axios": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.4.0.tgz", - "integrity": "sha512-S4XCWMEmzvo64T9GfvQDOXgYRDJ/wsSZc7Jvdgx5u1sd0JwsuPLqb3SYmusag+edF6ziyMensPVqLTSc1PiSEA==", + "version": "1.6.0", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.0.tgz", + "integrity": "sha512-EZ1DYihju9pwVB+jg67ogm+Tmqc6JmhamRN6I4Zt8DfZu5lbcQGw3ozH9lFejSJgs/ibaef3A9PMXPLeefFGJg==", "dependencies": { "follow-redirects": "^1.15.0", "form-data": "^4.0.0", @@ -23287,9 +23287,9 @@ "dev": true }, "axios": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.4.0.tgz", - "integrity": "sha512-S4XCWMEmzvo64T9GfvQDOXgYRDJ/wsSZc7Jvdgx5u1sd0JwsuPLqb3SYmusag+edF6ziyMensPVqLTSc1PiSEA==", + "version": "1.6.0", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.0.tgz", + "integrity": "sha512-EZ1DYihju9pwVB+jg67ogm+Tmqc6JmhamRN6I4Zt8DfZu5lbcQGw3ozH9lFejSJgs/ibaef3A9PMXPLeefFGJg==", "requires": { "follow-redirects": "^1.15.0", "form-data": "^4.0.0", diff --git a/package.json b/package.json index bcfbbe3dc..2d9b53adf 100644 --- a/package.json +++ b/package.json @@ -72,7 +72,7 @@ }, "dependencies": { "@contentful/rich-text-types": "^16.0.2", - "axios": "^1.4.0", + "axios": "^1.6.0", "contentful-resolve-response": "^1.8.1", "contentful-sdk-core": "^8.1.0", "json-stringify-safe": "^5.0.1",