rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Upgrade axios to 1.15.0 via npm override

Browse Source 
Fixes GitHub security alerts #82, #83, #84:
- Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
- NO_PROXY Hostname Normalization Bypass leading to SSRF
- Prototype Pollution in langsmith-sdk

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
Sacha Al Himdani
2026-04-13 13:58:10 +02:00
parent fbb4c29d38
commit bfed192421
2 changed files with 567 additions and 597 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1161
package-lock.json generated
View File

File diff suppressed because it is too large Load Diff

3
package.json
View File

@@ -32,7 +32,8 @@
"handlebars": "4.7.9",
"@langchain/community": "^1.1.25",
"lodash": "^4.18.1",
"lodash-es": "^4.18.1"
"lodash-es": "^4.18.1",
"axios": "^1.15.0"
},
"license": "MIT",
"packageManager": "npm@11.8.0",