sendgrid-nodejs
sendgrid-nodejs copied to clipboard
Server-Side Request Forgery in axios - version update needed
The npm package axios, versions 1.3.2 to 1.7.3, has been reported to have a high-severity vulnerability - Server-Side Request Forgery.
sendgrid-client is currently configured with axios 1.6.8
To avoid using vulnerable versions of axios, I suggest updating axios to the lastest version, 1.7.4.
Same issue here, flagged by Mend during the build process
CVE-2024-39338
Adding to the comments here, also pointing out that this is required as a High-security vulnerability in Snyk.io:
https://security.snyk.io/vuln/SNYK-JS-AXIOS-7361793