New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

@nestjs/common has direct dependency to vulnerable axios version: axios@0.21.1 #8114

Closed

mkmita opened this issue Sep 24, 2021 · 1 comment

Labels

needs triage type: question 🙌

mkmita commented Sep 24, 2021

Vulnerability report URL: https://nvd.nist.gov/vuln/detail/CVE-2021-3749

@nestjs/common@8.0.6
`-- axios@0.21.1

Can we update axios version to 0.21.4 (https://github.com/axios/axios/releases/tag/v0.21.4)?

mkmita added needs triage type: question 🙌 labels

Member

kamilmysliwiec commented Sep 24, 2021

kamilmysliwiec closed this as completed

nestjs locked and limited conversation to collaborators

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.