Upgrade Axios to a version without security errors

[jenseo]

Current Behavior

npm audit catches a CSR vulnerability in the axios devDependency of nx.

GHSA-wf5p-g6vw-rhxx

Expected Behavior

Bump axios to >=1.6.0 that patches the security issue.

GitHub Repo

No response

Steps to Reproduce

1. Install nx in a project
2. Run npm audit

Nx Report

Node   : 18.17.1
   OS     : darwin-arm64
   pnpm   : 8.9.0

   nx (global)  : 16.7.4
   nx           : 16.7.4
   @nrwl/tao    : 16.7.4
   typescript   : 5.2.2

Failure Logs

│ moderate            │ Axios Cross-Site Request Forgery Vulnerability         │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Package             │ axios                                                  │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Vulnerable versions │ >=0.8.1 <1.6.0                                         │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Patched versions    │ >=1.6.0                                                │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Paths               │ . > nx@16.7.4 > axios@1.4.0                            │
│                     │                                                        │
│                     │ packages/nuxt-module > @nuxt/devtools@0.8.3 >          │
│                     │ wait-on@7.0.1 > axios@0.27.2                           │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ More info           │ https://github.com/advisories/GHSA-wf5p-g6vw-rhxx      │
└─────────────────────┴────────────────────────────────────────────────────────┘
2 vulnerabilities found
Severity: 2 moderate

Package Manager Version

No response

Operating System

• macOS
• Linux
• Windows
• Other (Please specify)

Additional Information

No response

[aspergillusOryzae]

Will this be patched on nx v15.3.X too?

[matwebmasta]

Hi, same issue for v17.xx

[dodesheide]

Same issue for us.

[EelcoLos]

this is still the case with nx-cloud.
If I uninstall nx-cloud, I'd get

NX Could not find runner configuration for default

[github-actions]

This issue has been closed for more than 30 days. If this issue is still occuring, please open a new issue with more recent context.