Skip to content

Commit 31a0265

Browse files
authored
upgrade axios to v1.13.5 (#1286)
## High Level Overview of Change This PR is an effort to address the CVE: GHSA-43fc-jf86-j433. As per my investigation, there is no credible reachable vector for this vulnerability in the Explorer codebase. The non-test code does not use the `AxiosRequestConfig` parameter in the `axios.get` method invocations. <!-- Please include a summary/list of the changes. If too broad, please consider splitting into multiple PRs. --> <!-- Please include the context of a change. If a bug fix, when was the bug introduced? What was the behavior? If a new feature, why was this architecture chosen? What were the alternatives? If a refactor, how is this better than the previous implementation? If there is a design document for this feature, please link it here. --> ### Type of Change <!-- Please check relevant options, delete irrelevant ones. --> - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] Refactor (non-breaking change that only restructures code) - [ ] Tests (You added tests for code that already exists, or your new feature included in this PR) - [ ] Documentation Updates - [ ] Translation Updates - [ ] Release - [x] Upgrading the `axios` dependency to `v1.13.5`. <!-- In an effort to modernize the codebase, you should convert the files that you work with to React Hooks and TypeScript If this is not possible (e.g. it's too many changes, touching too many files, etc.) please explain why here. --> <!-- If just refactoring / back-end changes, this can be just an in-English description of the change at a technical level. If a UI change, screenshots should be included. --> ## Test Plan The existing tests pass. <!-- Please describe the tests that you ran to verify your changes and provide instructions so that others can reproduce. --> <!-- ## Future Tasks For future tasks related to PR. -->
1 parent fbc98fe commit 31a0265

2 files changed

Lines changed: 19 additions & 18 deletions

File tree

package-lock.json

Lines changed: 18 additions & 17 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
"@xrplf/isomorphic": "^1.0.0-beta.1",
99
"assert": "^2.1.0",
1010
"autoprefixer": "^10.4.20",
11-
"axios": "^1.6.5",
11+
"axios": "^1.13.5",
1212
"body-parser": "^1.20.3",
1313
"buffer": "^6.0.3",
1414
"bunyan": "^1.8.15",

0 commit comments

Comments
 (0)