Merge pull request #270 from ruturaj-browserstack/fix/axios-ssrf-PMAA-94

gaurav-singh-9227 · web-flow · commit a54179e82a37 · 2026-04-13T23:02:47.000+05:30
fix: bump axios to ^1.15.0 to patch NO_PROXY SSRF bypass (PMAA-94)
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@browserstack/mcp-server",
-  "version": "1.2.14",
+  "version": "1.2.15",
   "description": "BrowserStack's Official MCP Server",
   "mcpName": "io.github.browserstack/mcp-server",
   "main": "dist/index.js",
@@ -37,7 +37,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@types/form-data": "^2.5.2",
-    "axios": "^1.14.0",
+    "axios": "^1.15.0",
     "browserstack-local": "^1.5.12",
     "csv-parse": "^6.2.1",
     "dotenv": "^17.4.0",
diff --git a/server.json b/server.json
@@ -11,7 +11,7 @@
     {
       "registryType": "npm",
       "identifier": "@browserstack/mcp-server",
-      "version": "1.2.14",
+      "version": "1.2.15",
       "transport": {
         "type": "stdio"
       },

Original file line number	Diff line number	Diff line change
`@@ -11,7 +11,7 @@`
`11`	`11`	`{`
`12`	`12`	`"registryType": "npm",`
`13`	`13`	`"identifier": "@browserstack/mcp-server",`
`14`		`- "version": "1.2.14",`
	`14`	`+ "version": "1.2.15",`
`15`	`15`	`"transport": {`
`16`	`16`	`"type": "stdio"`
`17`	`17`	`},`