chore(deps): update dependency axios to v1.6.0 [security] by renovate[bot] · Pull Request #108 · mcnaveen/Random-Words-API

renovate · 2023-11-11T09:17:25Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
axios (source)	`1.1.3` → `1.6.0`

Axios Cross-Site Request Forgery Vulnerability

CVE-2023-45857 / GHSA-wf5p-g6vw-rhxx

More information

Details

An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

Severity

CVSS Score: 6.5 / 10 (Medium)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

axios/axios (axios)

`v1.6.0`

Compare Source

Features

adapter: add fetch adapter; (#6371) (a3ff99b)

Contributors to this release

1.6.8 (2024-03-15)

Bug Fixes

AxiosHeaders: fix AxiosHeaders conversion to an object during config merging (#6243) (2656612)
import: use named export for EventEmitter; (7320430)
vulnerability: update follow-redirects to 1.15.6 (#6300) (8786e0f)

Contributors to this release

1.6.7 (2024-01-25)

Bug Fixes

capture async stack only for rejections with native error objects; (#6203) (1a08f90)

Contributors to this release

1.6.6 (2024-01-24)

Bug Fixes

fixed missed dispatchBeforeRedirect argument (#5778) (a1938ff)
wrap errors to improve async stack trace (#5987) (123f354)

Contributors to this release

1.6.5 (2024-01-05)

Bug Fixes

ci: refactor notify action as a job of publish action; (#6176) (0736f95)
dns: fixed lookup error handling; (#6175) (f4f2b03)

Contributors to this release

1.6.4 (2024-01-03)

Bug Fixes

security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)

Contributors to this release

1.6.3 (2023-12-26)

Bug Fixes

Regular Expression Denial of Service (ReDoS) (#6132) (5e7ad38)

Contributors to this release

1.6.2 (2023-11-14)

Features

withXSRFToken: added withXSRFToken option as a workaround to achieve the old withCredentials behavior; (#6046) (cff9967)

PRs

feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ( #6046 )


📢 This PR added &#x27;withXSRFToken&#x27; option as a replacement for old withCredentials behaviour.
You should now use withXSRFToken along with withCredential to get the old behavior.
This functionality is considered as a fix.

Contributors to this release

1.6.1 (2023-11-08)

Bug Fixes

formdata: fixed content-type header normalization for non-standard browser environments; (#6056) (dd465ab)
platform: fixed emulated browser detection in node.js environment; (#6055) (3dc8369)

Contributors to this release

PRs

feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ( #6046 )


📢 This PR added &#x27;withXSRFToken&#x27; option as a replacement for old withCredentials behaviour.
You should now use withXSRFToken along with withCredential to get the old behavior.
This functionality is considered as a fix.

`v1.5.1`

Compare Source

Bug Fixes

CSRF: fixed CSRF vulnerability CVE-2023-45857 (#6028) (96ee232)
dns: fixed lookup function decorator to work properly in node v20; (#6011) (5aaff53)
types: fix AxiosHeaders types; (#5931) (a1c8ad0)

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

Contributors to this release

1.5.1 (2023-09-26)

Bug Fixes

adapters: improved adapters loading logic to have clear error messages; (#5919) (e410779)
formdata: fixed automatic addition of the Content-Type header for FormData in non-browser environments; (#5917) (bc9af51)
headers: allow content-encoding header to handle case-insensitive values (#5890) (#5892) (4c89f25)
types: removed duplicated code (9e62056)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

`v1.5.0`

Compare Source

Bug Fixes

CSRF: fixed CSRF vulnerability CVE-2023-45857 (#6028) (96ee232)
dns: fixed lookup function decorator to work properly in node v20; (#6011) (5aaff53)
types: fix AxiosHeaders types; (#5931) (a1c8ad0)

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

Contributors to this release

1.5.1 (2023-09-26)

Bug Fixes

adapters: improved adapters loading logic to have clear error messages; (#5919) (e410779)
formdata: fixed automatic addition of the Content-Type header for FormData in non-browser environments; (#5917) (bc9af51)
headers: allow content-encoding header to handle case-insensitive values (#5890) (#5892) (4c89f25)
types: removed duplicated code (9e62056)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

`v1.4.0`

Compare Source

Bug Fixes

formdata: add multipart/form-data content type for FormData payload on custom client environments; (#5678) (bbb61e7)
package: export package internals with unsafe path prefix; (#5677) (df38c94)

Features

dns: added support for a custom lookup function; (#5339) (2701911)
types: export AxiosHeaderValue type. (#5525) (726f1c8)

Performance Improvements

merge-config: optimize mergeConfig performance by avoiding duplicate key visits; (#5679) (e6f7053)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.6 (2023-04-19)

Bug Fixes

types: added transport to RawAxiosRequestConfig (#5445) (6f360a2)
utils: make isFormData detection logic stricter to avoid unnecessary calling of the toString method on the target; (#5661) (aa372f7)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.5 (2023-04-05)

Bug Fixes

headers: fixed isValidHeaderName to support full list of allowed characters; (#5584) (e7decef)
params: re-added the ability to set the function as paramsSerializer config; (#5633) (a56c866)

Contributors to this release

Dmitriy Mozgovoy

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.4 (2023-02-22)

Bug Fixes

blob: added a check to make sure the Blob class is available in the browser's global scope; (#5548) (3772c8f)
http: fixed regression bug when handling synchronous errors inside the adapter; (#5564) (a3b246c)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.3 (2023-02-13)

Bug Fixes

formdata: added a check to make sure the FormData class is available in the browser's global scope; (#5545) (a6dfa72)
formdata: fixed setting NaN as Content-Length for form payload in some cases; (#5535) (c19f7bf)
headers: fixed the filtering logic of the clear method; (#5542) (ea87ebf)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.2 (2023-02-03)

Bug Fixes

http: treat http://localhost as base URL for relative paths to avoid ERR_INVALID_URL error; (#5528) (128d56f)
http: use explicit import instead of TextEncoder global; (#5530) (6b3c305)

Contributors to this release

Dmitriy Mozgovoy

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.1 (2023-02-01)

Bug Fixes

formdata: add hotfix to use the asynchronous API to compute the content-length header value; (#5521) (96d336f)
serializer: fixed serialization of array-like objects; (#5518) (08104c0)

Contributors to this release

Dmitriy Mozgovoy

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

`v1.3.6`

Compare Source

Bug Fixes

formdata: add multipart/form-data content type for FormData payload on custom client environments; (#5678) (bbb61e7)
package: export package internals with unsafe path prefix; (#5677) (df38c94)

Features

dns: added support for a custom lookup function; (#5339) (2701911)
types: export AxiosHeaderValue type. (#5525) (726f1c8)

Performance Improvements

merge-config: optimize mergeConfig performance by avoiding duplicate key visits; (#5679) (e6f7053)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.6 (2023-04-19)

Bug Fixes

types: added transport to RawAxiosRequestConfig (#5445) (6f360a2)
utils: make isFormData detection logic stricter to avoid unnecessary calling of the toString method on the target; (#5661) (aa372f7)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.5 (2023-04-05)

Bug Fixes

headers: fixed isValidHeaderName to support full list of allowed characters; (#5584) (e7decef)
params: re-added the ability to set the function as paramsSerializer config; (#5633) (a56c866)

Contributors to this release

Dmitriy Mozgovoy

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.4 (2023-02-22)

Bug Fixes

blob: added a check to make sure the Blob class is available in the browser's global scope; (#5548) (3772c8f)
http: fixed regression bug when handling synchronous errors inside the adapter; (#5564) (a3b246c)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.3 (2023-02-13)

Bug Fixes

formdata: added a check to make sure the FormData class is available in the browser's global scope; (#5545) (a6dfa72)
formdata: fixed setting NaN as Content-Length for form payload in some cases; (#5535) (c19f7bf)
headers: fixed the filtering logic of the clear method; (#5542) (ea87ebf)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.2 (2023-02-03)

Bug Fixes

http: treat http://localhost as base URL for relative paths to avoid ERR_INVALID_URL error; (#5528) (128d56f)
http: use explicit import instead of TextEncoder global; (#5530) (6b3c305)

Contributors to this release

Dmitriy Mozgovoy

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.1 (2023-02-01)

Bug Fixes

formdata: add hotfix to use the asynchronous API to compute the content-length header value; (#5521) (96d336f)
serializer: fixed serialization of array-like objects; (#5518) (08104c0)

Contributors to this release

Dmitriy Mozgovoy

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

`v1.3.5`

Compare Source

Bug Fixes

formdata: add multipart/form-data content type for FormData payload on custom client environments; (#5678) (bbb61e7)
package: export package internals with unsafe path prefix; (#5677) (df38c94)

Features

dns: added support for a custom lookup function; (#5339) (2701911)
types: export AxiosHeaderValue type. (#5525) (726f1c8)

Performance Improvements

merge-config: optimize mergeConfig performance by avoiding duplicate key visits; (#5679) (e6f7053)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.6 (2023-04-19)

Bug Fixes

types: added transport to RawAxiosRequestConfig (#5445) (6f360a2)
utils: make isFormData detection logic stricter to avoid unnecessary calling of the toString method on the target; (#5661) (aa372f7)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.5 (2023-04-05)

Bug Fixes

headers: fixed isValidHeaderName to support full list of allowed characters; (#5584) (e7decef)
params: re-added the ability to set the function as paramsSerializer config; (#5633) (a56c866)

Contributors to this release

Dmitriy Mozgovoy

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.4 (2023-02-22)

Bug Fixes

blob: added a check to make sure the Blob class is available in the browser's global scope; (#5548) (3772c8f)
http: fixed regression bug when handling synchronous errors inside the adapter; (#5564) (a3b246c)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.3 (2023-02-13)

Bug Fixes

formdata: added a check to make sure the FormData class is available in the browser's global scope; (#5545) (a6dfa72)
formdata: fixed setting NaN as Content-Length for form payload in some cases; (#5535) (c19f7bf)
headers: fixed the filtering logic of the clear method; (#5542) (ea87ebf)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.2 (2023-02-03)

Bug Fixes

http: treat http://localhost as base URL for relative paths to avoid ERR_INVALID_URL error; (#5528) (128d56f)
http: use explicit import instead of TextEncoder global; (#5530) (6b3c305)

Contributors to this release

Dmitriy Mozgovoy

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.1 (2023-02-01)

Bug Fixes

formdata: add hotfix to use the asynchronous API to compute the content-length header value; (#5521) (96d336f)
serializer: fixed serialization of array-like objects; (#5518) (08104c0)

Contributors to this release

Dmitriy Mozgovoy

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

`v1.3.4`

Compare Source

Bug Fixes

formdata: add multipart/form-data content type for FormData payload on custom client environments; (#5678) (bbb61e7)
package: export package internals with unsafe path prefix; (#5677) (df38c94)

Features

dns: added support for a custom lookup function; (#5339) (2701911)
types: export AxiosHeaderValue type. (#5525) (726f1c8)

Performance Improvements

merge-config: optimize mergeConfig performance by avoiding duplicate key visits; (#5679) (e6f7053)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.6 (2023-04-19)

Bug Fixes

types: added transport to RawAxiosRequestConfig (#5445) (6f360a2)
utils: make isFormData detection logic stricter to avoid unnecessary calling of the toString method on the target; (#5661) (aa372f7)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.5 (2023-04-05)

Bug Fixes

headers: fixed isValidHeaderName to support full list of allowed characters; (#5584) (e7decef)
params: re-added the ability to set the function as paramsSerializer config; (#5633) (a56c866)

Contributors to this release

Dmitriy Mozgovoy

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.3.4 (2023-02-22)

Bug Fixes

blob: added a check to make sure the Blob class is available in the browser's global scope; (#5548) (3772c8f)
http: fixed regression bug when handling synchronous errors inside the adapter; (#5564) (a3b246c)

Contributors to this release

Dmitriy Mozgovoy
<img src="https://avatars.githubusercontent.com/u/19550000?v=4&s=18" alt="avatar" wid

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Kolkata)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2023-11-11T09:17:25Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
random-words-api	❌ Failed (Inspect)			Jun 4, 2025 10:16am

renovate Bot added the renovate label Nov 11, 2023

vercel Bot deployed to Preview November 11, 2023 09:17 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 1d2daa6 to 0d5adc1 Compare November 16, 2023 11:50

vercel Bot deployed to Preview November 16, 2023 11:50 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 0d5adc1 to ba95b21 Compare January 28, 2024 12:41

vercel Bot deployed to Preview January 28, 2024 12:42 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from ba95b21 to 3d1386b Compare March 20, 2024 14:03

vercel Bot deployed to Preview March 20, 2024 14:03 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 3d1386b to 754cede Compare June 4, 2024 12:05

vercel Bot deployed to Preview June 4, 2024 12:06 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 754cede to 4f84cee Compare August 6, 2024 08:14

vercel Bot deployed to Preview August 6, 2024 08:14 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 4f84cee to b3c5032 Compare August 28, 2024 09:38

vercel Bot deployed to Preview August 28, 2024 09:38 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from b3c5032 to 3a42b8f Compare October 9, 2024 11:16

vercel Bot deployed to Preview October 9, 2024 11:16 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 3a42b8f to 06c5e18 Compare December 2, 2024 11:47

vercel Bot deployed to Preview December 2, 2024 11:47 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 06c5e18 to 1d2d694 Compare January 23, 2025 17:50

vercel Bot deployed to Preview January 23, 2025 17:50 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 1d2d694 to 36a3d21 Compare January 30, 2025 17:14

vercel Bot deployed to Preview January 30, 2025 17:14 View deployment

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 36a3d21 to b32344a Compare March 3, 2025 11:43

vercel Bot had a problem deploying to Preview March 3, 2025 11:44 Failure

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from b32344a to 002e476 Compare March 8, 2025 14:06

renovate Bot changed the title ~~fix(deps): update dependency axios to v1.6.0 [security]~~ fix(deps): update dependency axios to v1.8.2 [security] Mar 8, 2025

vercel Bot had a problem deploying to Preview March 8, 2025 14:06 Failure

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 002e476 to a055a5a Compare March 11, 2025 10:27

vercel Bot had a problem deploying to Preview March 11, 2025 10:27 Failure

vercel Bot had a problem deploying to Preview May 19, 2025 16:36 Failure

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from e7d9991 to 23f387e Compare May 28, 2025 09:46

vercel Bot had a problem deploying to Preview May 28, 2025 09:46 Failure

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 23f387e to 379da20 Compare June 4, 2025 10:16

vercel Bot had a problem deploying to Preview June 4, 2025 10:16 Failure

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 379da20 to 834d681 Compare June 22, 2025 15:28

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 834d681 to 5a41a67 Compare July 2, 2025 19:15

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch 2 times, most recently from 21dbe2a to d28784d Compare August 13, 2025 14:12

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from d28784d to 5afd9a4 Compare August 31, 2025 13:37

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 5afd9a4 to 92d9b6f Compare September 25, 2025 16:02

renovate Bot changed the title ~~fix(deps): update dependency axios to v1.6.0 [security]~~ chore(deps): update dependency axios to v1.6.0 [security] Sep 25, 2025

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 92d9b6f to dbb64db Compare October 21, 2025 15:41

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from dbb64db to 792da07 Compare November 11, 2025 00:58

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 792da07 to 2a214a4 Compare November 18, 2025 10:12

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 2a214a4 to 61d3b82 Compare December 3, 2025 18:24

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch 2 times, most recently from 3485bc6 to eb24aca Compare December 31, 2025 19:39

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from eb24aca to 784c675 Compare January 8, 2026 19:08

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch 2 times, most recently from 5f05f10 to f78be8c Compare January 23, 2026 20:06

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from f78be8c to 4eda728 Compare February 2, 2026 18:24

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch 2 times, most recently from f6931c7 to 803f15b Compare February 17, 2026 20:55

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 803f15b to 277f0f2 Compare March 5, 2026 15:06

renovate Bot force-pushed the renovate/npm-axios-vulnerability branch from 277f0f2 to ca3ae16 Compare March 13, 2026 11:52

renovate Bot changed the title ~~chore(deps): update dependency axios to v1.6.0 [security]~~ chore(deps): update dependency axios to v1.6.0 [security] - autoclosed Mar 27, 2026

renovate Bot closed this Mar 27, 2026

renovate Bot deleted the renovate/npm-axios-vulnerability branch March 27, 2026 02:03

chore(deps): update dependency axios to v1.6.0 [security]

cf53403

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update dependency axios to v1.6.0 [security]#108

chore(deps): update dependency axios to v1.6.0 [security]#108
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/npm-axios-vulnerability

renovate Bot commented Nov 11, 2023 •

edited

Loading

Uh oh!

vercel Bot commented Nov 11, 2023 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Nov 11, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Axios Cross-Site Request Forgery Vulnerability

Details

Severity

References

Release Notes

v1.6.0

Features

Contributors to this release

1.6.8 (2024-03-15)

Bug Fixes

Contributors to this release

1.6.7 (2024-01-25)

Bug Fixes

Contributors to this release

1.6.6 (2024-01-24)

Bug Fixes

Contributors to this release

1.6.5 (2024-01-05)

Bug Fixes

Contributors to this release

1.6.4 (2024-01-03)

Bug Fixes

Contributors to this release

1.6.3 (2023-12-26)

Bug Fixes

Contributors to this release

1.6.2 (2023-11-14)

Features

PRs

Contributors to this release

1.6.1 (2023-11-08)

Bug Fixes

Contributors to this release

PRs

v1.5.1

Bug Fixes

PRs

Contributors to this release

1.5.1 (2023-09-26)

Bug Fixes

Contributors to this release

PRs

v1.5.0

Bug Fixes

PRs

Contributors to this release

1.5.1 (2023-09-26)

Bug Fixes

Contributors to this release

PRs

v1.4.0

Bug Fixes

Features

Performance Improvements

Contributors to this release

PRs

1.3.6 (2023-04-19)

Bug Fixes

Contributors to this release

PRs

1.3.5 (2023-04-05)

Bug Fixes

Contributors to this release

PRs

1.3.4 (2023-02-22)

Bug Fixes

Contributors to this release

PRs

1.3.3 (2023-02-13)

Bug Fixes

Contributors to this release

PRs

1.3.2 (2023-02-03)

Bug Fixes

Contributors to this release

PRs

renovate Bot commented Nov 11, 2023 •

edited

Loading

`v1.6.0`

`v1.5.1`

`v1.5.0`

`v1.4.0`

`v1.3.6`

`v1.3.5`