From ed232cdcfae7a773bbfc871ecee296797dd35fa7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?H=C3=A5kon=20L=C3=B8vdal?= Date: Tue, 10 Feb 2026 01:01:09 +0100 Subject: [PATCH] Update axios dependency (fixes GHSA-43fc-jf86-j433) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit $ npm audit axios <=1.13.4 Severity: high Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig - https://github.com/advisories/GHSA-43fc-jf86-j433 fix available via `npm audit fix --force` Will install axios@1.13.5, which is outside the stated dependency range node_modules/axios --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 6626351..38c8e22 100644 --- a/package.json +++ b/package.json @@ -29,7 +29,7 @@ }, "dependencies": { "ansi-colors": "^4.1.3", - "axios": "1.12.2", + "axios": "^1.13.5", "bcryptjs": "3.0.2", "cli-table": "^0.3.11", "enquirer": "^2.3.6",