Open
Description
One of the dependency "wait-on: 7.0.0" is using axios version 1.7.2.
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
To fix this security issue, we need to update wait-on to 8.0.0.
wait-on commit that fixed this issue: jeffbski/wait-on@672fd83
Metadata
Metadata
Assignees
Labels
No labels