Skip to content

build(deps): patch axios security vulnerability#2941

Merged
ethan ozelius (ethan-ozelius-contentful) merged 1 commit intomainfrom
DX-728/axios-vuln
Feb 20, 2026
Merged

build(deps): patch axios security vulnerability#2941
ethan ozelius (ethan-ozelius-contentful) merged 1 commit intomainfrom
DX-728/axios-vuln

Conversation

@ethan-ozelius-contentful
Copy link
Copy Markdown
Contributor

Summary

Patch a security vulnerability in axios.

https://contentful.atlassian.net/browse/ZEND-7627

https://contentful.atlassian.net/browse/DX-728

https://security.snyk.io/package/npm/axios/1.13.4

Affected versions of this package are vulnerable to Prototype Pollution via the mergeConfig function. An attacker can cause the application to crash by supplying a malicious configuration object containing a proto property, typically by leveraging JSON.parse().
How to fix Prototype Pollution?
Upgrade axios to version 1.13.5 or higher.

@ethan-ozelius-contentful ethan ozelius (ethan-ozelius-contentful) merged commit 0a5939e into main Feb 20, 2026
22 of 31 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants