Bump version of axios to fix CVE-2024-28849 and others.

This CVE is associated with `follow-redirects`, which is brought in by `axios`, so bumping `axios` to version 1.7.5 brings in the updated version of `follow-redirects` (1.15.6) without the vulnerability. This also resolves [another CVE here](groupdocs-conversion-cloud#9).
schalkwijk · Aug 28, 2024 · c3d7de9 · c3d7de9
1 parent 8c3adce
commit c3d7de9
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 10 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -32,7 +32,7 @@
     "build:package": "npm pack"
   },
   "dependencies": {
-    "axios": "1.6.2",
+    "axios": "1.7.5",
     "form-data": "*",
     "jsonwebtoken": "9.0.1",
     "qs": "6.11.2"