Skip to content

Axios version 0.21.4 contains CVE Vulnerability #50

Description

@joshtoczko

The apple-auth package currently has an older version of Axios installed. A recent CVE has been filed against Axios versions prior to 1.8.2

We should update Axios package to 1.8.2 package.

CVE Information:
https://nvd.nist.gov/vuln/detail/CVE-2025-27152

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependenciesPull requests that update a dependency file

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions