Outdated dependencies with moderate severity security issues (CVE-2023-45857) #794
Labels
dependencies
Pull requests that update a dependency file
priority: high (P0)
High priority
version: ga
Issues related to major/GA releases
Milestone
tl;dr -
wait-on
dependency needs updated to updateaxios
sub-dependency versionDescribe the bug
Nested dependency axios needs updated for CVE-2023-45857 (axios/axios#6006) this is fixed in axios.
This dependency appears to stem from the
wait-on
package that has since updated to fix this: jeffbski/wait-on#147Expected outcome
Update wait-on dependency to v7.2.0+
The text was updated successfully, but these errors were encountered: