mssql-ssrs
mssql-ssrs copied to clipboard
Security Vulnerability due to Old Axios Dependency
Dependabot has found a moderate-level issue with older versions of Axios:
An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.
Seeing as how mssql-ssrs requires Axios 0.27.2, it needs to be updated to require latest Axios.
Any update on this please?
updated all packages to lates