Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Axios <1.7.4 vulnerability causing builds using package to fail #148

Open
jmgrimp opened this issue Aug 21, 2024 · 1 comment
Open

Axios <1.7.4 vulnerability causing builds using package to fail #148

jmgrimp opened this issue Aug 21, 2024 · 1 comment

Comments

@jmgrimp
Copy link

jmgrimp commented Aug 21, 2024

Currently using 0.0.59. Axios vulnerabily causing builds to fail. Unfortunately, reducing the version creates more issues. Currently, the Axios version is locked at 1.6.4

cybersource_axios_vulnerability
@ashleywxwx
Copy link

If anyone comes across this via search engine, and are on npm 8.3 or higher, you can override the axios version. Here, we've manually defined axios under dependencies and then added the following:

  "overrides": {
    "axios": "$axios"
  }

source
source

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants