azu / azu/github-webhook-SecurityVulnerability-test

Vulnerability found in axios <= 0.18.0

Open
#3 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
HCL
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

## Vulnerability information

- Affected Package: [axios](https://www.npmjs.com/package/axios) <= 0.18.0
- Fixed in [0.18.1](https://npmfs.com/package/axios/0.18.1/)
- GitHub Alerts:

## How to fix?

Upgrade axios to version 0.18.1 or later. For example:

```
"dependencies": {
"axios": ">=0.18.1"
}
```

or…

```
"devDependencies": {
"axios": ">=0.18.1"
}
```

## Details

-

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by inspecting package-lock.json and the dependency declarations described in the issue. Confirm the installed axios version and update it to 0.18.1 or later; done means the lockfile no longer resolves axios at or below 0.18.0 and the vulnerability is addressed.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, node.js
Domain
security
Issue type
Bug
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.