Skip to content

Update axios in @heml/elements to avoid security alert #92

@juliakaltenegger

Description

@juliakaltenegger

Axios <= 0.18.0 causes high severity security alert (see CVE below). Version ^0.17.0 is specified as a dependency in @heml/elements.

"axios": "^0.17.0",

CVE

Security Alert: high severity

Vulnerable versions: <= 0.18.0
Patched version: 0.18.1

Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.

CVE-2019-10742

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions