-
Notifications
You must be signed in to change notification settings - Fork 10
Closed
Labels
featurefeature to addfeature to add
Description
Hi! Thank you for this lib!
I was wondering why did you fixed the version of axios
dependency. Why not use the semver range ^0.21.1
instead? (or even ^0.24.0
)
nestjs-http-promise/package.json
Line 21 in 1502ac3
"axios": "0.21.1", |
Also, npm audit
reports this vulnerability of [email protected]
axios <=0.21.1
Severity: high
Incorrect Comparison in axios - https://github.com/advisories/GHSA-cph5-m8f7-6c5x
No fix available
node_modules/nestjs-http-promise/node_modules/axios
nestjs-http-promise *
Depends on vulnerable versions of axios
node_modules/nestjs-http-promise
Metadata
Metadata
Assignees
Labels
featurefeature to addfeature to add