AdminLTE icon indicating copy to clipboard operation
AdminLTE copied to clipboard

Published 20 hours ago • verified publisher icon ColorlibHQ

2 High Severity Vulnerabilities

Open Mu-Gee opened this issue 8 months ago • 0 comments

Describe the bug axios <1.8.2 Severity: high axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL

To Reproduce Steps to reproduce the behavior:

  1. npm install
  2. npm audit

Expected behavior Expected a clean install with all packages updated but some dependencies seem to depend on other that have been found to be vulnerable.

Environment (please complete the following information):

  • AdminLTE Version: [4.0.0-beta3]
  • Operating System: [Windows 10]
  • Browser (Version): [Chrome]

Additional context node_modules/axios bundlewatch * Depends on vulnerable versions of axios node_modules/bundlewatch

Mu-Gee avatar Mar 17 '25 08:03 Mu-Gee