Pin Axios to 1.14.0 to avoid https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html

dpage · dpage · commit 8e622da96502 · 2026-03-31T12:59:08.000+01:00
diff --git a/runtime/package.json b/runtime/package.json
@@ -17,7 +17,7 @@
     "eslint-plugin-unused-imports": "^4.4.1"
   },
   "dependencies": {
-    "axios": "^1.13.5",
+    "axios": "1.14.0",
     "electron-context-menu": "^4.1.0",
     "electron-store": "^11.0.2"
   }
diff --git a/web/package.json b/web/package.json
@@ -99,7 +99,7 @@
     "ajv": "^8.8.2",
     "anti-trojan-source": "^1.4.0",
     "aspen-decorations": "^1.0.2",
-    "axios": "^1.13.5",
+    "axios": "1.14.0",
     "babelify": "~10.0.0",
     "bignumber.js": "^10.0.2",
     "brace": "^0.11.1",

Original file line number	Diff line number	Diff line change
`@@ -17,7 +17,7 @@`
`17`	`17`	`"eslint-plugin-unused-imports": "^4.4.1"`
`18`	`18`	`},`
`19`	`19`	`"dependencies": {`
`20`		`- "axios": "^1.13.5",`
	`20`	`+ "axios": "1.14.0",`
`21`	`21`	`"electron-context-menu": "^4.1.0",`
`22`	`22`	`"electron-store": "^11.0.2"`
`23`	`23`	`}`