Skip to content

fixing axios CVE#199

Merged
EnriqueL8 merged 1 commit into
hyperledger:mainfrom
kaleido-io:cve-fix
Apr 22, 2026
Merged

fixing axios CVE#199
EnriqueL8 merged 1 commit into
hyperledger:mainfrom
kaleido-io:cve-fix

Conversation

@Chengxuan

Copy link
Copy Markdown
Contributor

Update Axios to fix the following CVEs:

  • CVE-2025-62718 | CRITICAL | 9.9 | NVD | axios | 1.15.0, 0.31.0 | axios: Axios: Server-Side Request Forgery and proxy bypass due to improper ho... |
  • CVE-2026-40175 | CRITICAL | 10.0 | Trivy | axios | 1.15.0, 0.31.0 | axios: Axios: Remote Code Execution via Prototype Pollution escalation | NO | Node.js, firefly-dataexch... |

Signed-off-by: Chengxuan Xing <chengxuan.xing@kaleido.io>
@Chengxuan Chengxuan requested a review from a team as a code owner April 22, 2026 08:26
@EnriqueL8 EnriqueL8 merged commit 32c9c17 into hyperledger:main Apr 22, 2026
5 checks passed
@Chengxuan Chengxuan deleted the cve-fix branch April 22, 2026 09:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants