Skip to content

Commit 69092f4

Browse files
author
amaksimenko
committedNov 7, 2023
fix: update axios to 1.6.0 to fix CVE-2023-45857
1 parent aefc49e commit 69092f4

File tree

3 files changed

+23
-13
lines changed

3 files changed

+23
-13
lines changed
 

‎lib/wait-on.js

+1-2
Original file line numberDiff line numberDiff line change
@@ -7,14 +7,13 @@ const https = require('https');
77
const net = require('net');
88
const util = require('util');
99
const axiosPkg = require('axios').default;
10-
const axiosHttpAdapter = require('axios/lib/adapters/http');
1110
const { isBoolean, isEmpty, negate, noop, once, partial, pick, zip } = require('lodash/fp');
1211
const { NEVER, combineLatest, from, merge, throwError, timer } = require('rxjs');
1312
const { distinctUntilChanged, map, mergeMap, scan, startWith, take, takeWhile } = require('rxjs/operators');
1413

1514
// force http adapter for axios, otherwise if using jest/jsdom xhr might
1615
// be used and it logs all errors polluting the logs
17-
const axios = axiosPkg.create({ adapter: axiosHttpAdapter });
16+
const axios = axiosPkg.create({ adapter: 'http' });
1817
const isNotABoolean = negate(isBoolean);
1918
const isNotEmpty = negate(isEmpty);
2019
const fstat = promisify(fs.stat);

‎package-lock.json

+21-10
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@
3838
"temp": "^0.9.4"
3939
},
4040
"dependencies": {
41-
"axios": "^0.27.2",
41+
"axios": "^1.6.0",
4242
"joi": "^17.11.0",
4343
"lodash": "^4.17.21",
4444
"minimist": "^1.2.8",

0 commit comments

Comments
 (0)
Please sign in to comment.