Skip to content

fix(deps): upgrade axios to 1.15.0 to fix CVE-2025-62718#466

Open
khadar1020 wants to merge 1 commit intocameri:mainfrom
khadar1020:axios_upgrade
Open

fix(deps): upgrade axios to 1.15.0 to fix CVE-2025-62718#466
khadar1020 wants to merge 1 commit intocameri:mainfrom
khadar1020:axios_upgrade

Conversation

@khadar1020
Copy link
Copy Markdown

Axios Upgrade to fix CVE-2025-62718

Description

This PR upgrades the Axios dependency to version ^1.15.0 to address the critical security vulnerability CVE-2025-62718.
Versions of Axios below 1.15.0 are affected by this vulnerability. Updating ensures the application uses a secure version.

Related Issue

Resolves: #431

Motivation and Context

A critical vulnerability (CVE-2025-62718) was identified in older versions of Axios.
Upgrading to >=1.15.0 mitigates this risk and ensures the project remains secure and up-to-date.

How Has This Been Tested?

  1. Ran npm install to update dependencies and regenerate package-lock.json
  2. Verified installed version using:
    1. npm list axios
    2. Confirmed that the project now uses axios@1.15.0
  3. Ensured the application runs without errors after the upgrade and all test cases were passing

Screenshots (if appropriate):

Types of changes

  • Non-functional change (docs, style, minor refactor)
  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

  • My code follows the code style of this project.
  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.
  • I have read the CONTRIBUTING document.
  • I have added tests to cover my code changes.
  • All new and existing tests passed.

@khadar1020
Copy link
Copy Markdown
Author

HI @cameri, when you have time please review this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade axios to 1.15.0+ to fix critical CVE-2025-62718

1 participant