From ff3703a12a9b9f6ca7d1599b23d134d7be14efbb Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 28 Nov 2024 02:50:41 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6671926 --- package.json | 2 +- yarn.lock | 9 +++++++++ 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index cfcd20fa..45504a14 100644 --- a/package.json +++ b/package.json @@ -48,7 +48,7 @@ "@neutron-org/neutronjs": "https://github.com/neutron-org/neutronjs.git#7f45328320b53b4fa2b572bc25bb96bf80260181", "@neutron-org/neutronjsplus": "https://github.com/neutron-org/neutronjsplus.git#39dd19b17165ef206b40018ff437054210c2bdbc", "@types/lodash": "^4.14.182", - "axios": "1.6.0", + "axios": "1.7.8", "commander": "^10.0.0", "cosmjs-types": "^0.9.0", "date-fns": "^2.16.1", diff --git a/yarn.lock b/yarn.lock index 0c07889a..5bd535a6 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2026,6 +2026,15 @@ axios@1.6.0: form-data "^4.0.0" proxy-from-env "^1.1.0" +axios@1.7.8: + version "1.7.8" + resolved "https://registry.yarnpkg.com/axios/-/axios-1.7.8.tgz#1997b1496b394c21953e68c14aaa51b7b5de3d6e" + integrity sha512-Uu0wb7KNqK2t5K+YQyVCLM76prD5sRFjKHbJYCP1J7JFGEQ6nN7HWn9+04LAeiJ3ji54lgS/gZCH1oxyrf1SPw== + dependencies: + follow-redirects "^1.15.6" + form-data "^4.0.0" + proxy-from-env "^1.1.0" + axios@^1.6.0, axios@^1.6.7: version "1.7.7" resolved "https://registry.yarnpkg.com/axios/-/axios-1.7.7.tgz#2f554296f9892a72ac8d8e4c5b79c14a91d0a47f"