IBM/node-sdk-core

Vulnerability in axios 0.21.1

wanghwh opened this issue · 2 comments

wanghwh commented

Remember, an issue is not the place to ask questions. You can use
Stack Overflow for that, or
you may want to start a discussion on dW Answers.

Before you open an issue, please check if a similar issue already exists or has been closed before.

When reporting a bug, please be sure to include the following:

  • Steps to reproduce
  • Expected behavior
  • Actual behavior
  • Node version
  • SDK version:

When you open an issue for a feature request, please add as much detail as possible:

  • A descriptive title starting with the service name
  • A description of the problem you're trying to solve : dependency check was failed for old version of axios, see screenshot
  • A suggested solution if possible : upgrade to latest 0.21.3

image

padamstx commented

Hi, we're aware of the axios vulnerability and will address it as soon as a fixed version of axios is available.

padamstx commented

This problem has now been fixed in the latest version of this project.