Latest released version (1.7.0) contains Axios CVE-2023-45857

[jracabado]

The fix has already been merged in master (99b7eb0abff808ac9470a60a39c7f5e22c464b0f), could we get a new NPM release with this?

[SnowySailor]

Bumping this @yakovkhalinsky

Installing with npm install backblaze-b2 will install the version with the vulnerability. You will need to bump the version number to 1.7.1 and npm publish this package again for the vulnerability fix to be available for others.

[hotmailbelike]

hello @yakovkhalinsky The severity of vulnerabilities has gone from medium to high now. Would really appreciate if you could make a new release!

[Webkadabra]

Any chance this trivial thing can be fixed? Literally no brain power needed

[odensc]

Sorry folks. I published 1.7.1 which should fix the vulnerability warnings by updating to the latest version of axios.

I no longer use B2 nor do I have any interest so I'll be removing myself from the repo/npm package from this point on. I'd suggest that if there's anyone willing to take on maintainership and take care of some of the lingering issues/PRs they should ask @yakovkhalinsky to pass the reins!