segmentio / analytics-node

The hassle-free way to integrate analytics into any node application.

Home Page:https://segment.com/libraries/node

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Resolve vulnerability axios 0.21.4

mxpaspa opened this issue · comments

Whitesource is reporting a security vulnerability in the version of axios included in the latest versionanlytics-node
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-1214

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository axios/axios prior to 0.26.

@nd4p90x We are also hitting this issue in one of our application, which uses, analytics-node library. Can you please help us get ETA on the requested fix. FYI..

@agkhare This issue has been added to our todo list. We will keep you updated. Thank you