[Snyk] Security upgrade axios from 1.2.1 to 1.8.2

[karencapiiro]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• website/package.json
• website/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-9292519	251

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)

[socket-security]

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected] ➜ 1.8.2	Transitive: environment, filesystem	+8	2.51 MB	emilyemorehouse, jasonsaayman, mzabriskie, ...1 more
pypi/[email protected]	environment, eval, filesystem, network, shell, unsafe	+61	94.3 MB	piro
pypi/[email protected]	environment, eval, filesystem, unsafe	+2	108 MB	dmontagu, samuelcolvin
pypi/[email protected]	Transitive: environment, eval, filesystem, network, shell	+42	88.1 MB	bbc, theskumar
pypi/[email protected]	environment, filesystem, unsafe	0	1.04 MB	stub
pypi/[email protected]	Transitive: environment, eval, filesystem, network, shell, unsafe	+55	20.4 MB	Lukasa, graffatcolmingov, nateprewitt
pypi/[email protected]	None	0	80 kB	dbader, sijmenhuizenga
pypi/[email protected]	environment, eval, filesystem, network, shell, unsafe	+44	1.5 GB	matthew.brett, pv, rgommers, ...3 more
pypi/[email protected]	environment, eval, filesystem, network, shell, unsafe	0	51.1 MB	CaselIT
pypi/[email protected]	environment, eval, network	0	92.3 kB	tiangolo
pypi/[email protected]	None	0	234 kB	Kludex, tomchristie
pypi/[email protected]	environment, filesystem, shell Transitive: eval, network, unsafe	+196	1.32 GB	tiangolo
pypi/[email protected]	environment, filesystem, network	0	182 kB	Kludex, tomchristie

View full report↗︎

[rafikmojr]

Checkmarx One – Scan Summary & Details – 72eabc15-d2f8-4a35-8f16-2c7e77dbd9b0

New Issues (2)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	Reflected_XSS	/website/src/pages/api/update_task.ts: 25	details The method Cx7b0b8fb6 embeds untrusted data in generated output with json, at line 78 of /website/src/pages/api/update_task.ts. This untrusted data... Attack Vector
	Reflected_XSS	/website/src/pages/api/new_task/[task_type].ts: 15	details The method Cx0a033392 embeds untrusted data in generated output with json, at line 71 of /website/src/pages/api/new_task/[task_type].ts. This untru... Attack Vector

Fixed Issues (33)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Reflected_XSS	/website/src/pages/api/new_task/[task_type].ts: 28
	Reflected_XSS	/website/src/pages/api/update_task.ts: 25
	Reflected_XSS	/website/src/pages/api/new_task/[task_type].ts: 15
	Host Namespace is Shared	/docker-compose.yaml: 11
	Host Namespace is Shared	/docker-compose.yaml: 5
	Host Namespace is Shared	/docker-compose.yaml: 11
	Host Namespace is Shared	/docker-compose.yaml: 50
	Host Namespace is Shared	/docker-compose.yaml: 19
	Host Namespace is Shared	/docker-compose.yaml: 19
	Host Namespace is Shared	/docker-compose.yaml: 18
	Host Namespace is Shared	/docker-compose.yaml: 27
	Host Namespace is Shared	/docker-compose.yaml: 18
	Host Namespace is Shared	/docker-compose.yaml: 26
	Host Namespace is Shared	/docker-compose.yaml: 27
	Host Namespace is Shared	/docker-compose.yaml: 4
	Host Namespace is Shared	/docker-compose.yaml: 5
	Networks Not Set	/docker-compose.yaml: 27
	Networks Not Set	/docker-compose.yaml: 11
	Networks Not Set	/docker-compose.yaml: 5
	Networks Not Set	/docker-compose.yaml: 18
	Networks Not Set	/docker-compose.yaml: 4
	Networks Not Set	/docker-compose.yaml: 19
	Networks Not Set	/docker-compose.yaml: 5
	Networks Not Set	/docker-compose.yaml: 26
	Networks Not Set	/docker-compose.yaml: 27
	Networks Not Set	/docker-compose.yaml: 18
	Networks Not Set	/docker-compose.yaml: 50
	Networks Not Set	/docker-compose.yaml: 11
	Networks Not Set	/docker-compose.yaml: 19
	SSRF	/website/src/pages/api/new_task/[task_type].ts: 15
	Missing_CSP_Header	/website/src/lib/poster.ts: 4
	Unsafe_Use_Of_Target_blank	/website/src/components/CallToAction.tsx: 19
	Unsafe_Use_Of_Target_blank	/website/src/components/CallToAction.tsx: 34