web-onefx-boilerplate icon indicating copy to clipboard operation
web-onefx-boilerplate copied to clipboard

Update dependency axios to v0.21.1 [SECURITY]

Open renovate[bot] opened this issue 4 years ago • 0 comments

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
axios 0.20.0 -> 0.21.1 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address.


Release Notes

axios/axios

v0.21.1

Compare Source

Fixes and Functionality:

  • Hotfix: Prevent SSRF (#​3410)
  • Protocol not parsed when setting proxy config from env vars (#​3070)
  • Updating axios in types to be lower case (#​2797)
  • Adding a type guard for AxiosError (#​2949)

Internal and Tests:

  • Remove the skipping of the socket http test (#​3364)
  • Use different socket for Win32 test (#​3375)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

v0.21.0

Compare Source

Fixes and Functionality:

  • Fixing requestHeaders.Authorization (#​3287)
  • Fixing node types (#​3237)
  • Fixing axios.delete ignores config.data (#​3282)
  • Revert "Fixing overwrite Blob/File type as Content-Type in browser. (#​1773)" (#​3289)
  • Fixing an issue that type 'null' and 'undefined' is not assignable to validateStatus when typescript strict option is enabled (#​3200)

Internal and Tests:

  • Lock travis to not use node v15 (#​3361)

Documentation:

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:


Renovate configuration

:date: Schedule: "" (UTC).

:vertical_traffic_light: Automerge: Enabled.

:recycle: Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.

:no_bell: Ignore: Close this PR and you won't be reminded about this update again.


  • [ ] If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

renovate[bot] avatar Jan 08 '21 02:01 renovate[bot]