-
-
Notifications
You must be signed in to change notification settings - Fork 18.3k
Open
Labels
Description
Describe the bug
axios <1.8.2
Severity: high
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL
To Reproduce
Steps to reproduce the behavior:
- npm install
- npm audit
Expected behavior
Expected a clean install with all packages updated but some dependencies seem to depend on other that have been found to be vulnerable.
Environment (please complete the following information):
- AdminLTE Version: [4.0.0-beta3]
- Operating System: [Windows 10]
- Browser (Version): [Chrome]
Additional context
node_modules/axios
bundlewatch *
Depends on vulnerable versions of axios
node_modules/bundlewatch