erezrokah / aws-testing-library / 7998308366

100%

master: 100%

push

github

fix(deps): update dependency axios to ^0.28.0 [security] (#866)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [axios](https://axios-http.com)
([source](https://togithub.com/axios/axios)) | [`^0.27.0` ->
`^0.28.0`](https://renovatebot.com/diffs/npm/axios/0.27.2/0.28.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/axios/0.28.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/axios/0.28.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/axios/0.27.2/0.28.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/axios/0.27.2/0.28.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

### GitHub Vulnerability Alerts

#### [CVE-2023-45857](https://nvd.nist.gov/vuln/detail/CVE-2023-45857)

An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals
the confidential XSRF-TOKEN stored in cookies by including it in the
HTTP header X-XSRF-TOKEN for every request made to any host allowing
attackers to view sensitive information.

---

### Release Notes

<details>
<summary>axios/axios (axios)</summary>

### [`v0.28.0`](https://togithub.com/axios/axios/releases/tag/v0.28.0)

[Compare
Source](https://togithub.com/axios/axios/compare/v0.27.2...v0.28.0)

#### Release notes:

##### Bug Fixes

- fix(security): fixed CVE-2023-45857 by backporting `withXSRFToken`
option to v0.x
([#&#8203;6091](https://togithub.com/axios/axios/issues/6091))

##### Backports from v1.x:

- Allow null indexes on formSerializer and paramsSerializer v0.x
([#&#8203;4961](https://togithub.com/axios/axios/issues/4961))
- Fixing content-type header repeated
... (continued)

122 of 124 branches covered (98.39%)

Branch coverage included in aggregate %.

606 of 606 relevant lines covered (100.0%)

27.76 hits per line