Skip to content

Commit b0904e7

Browse files
fix: upgrade axios and jsonwebtoken to resolve CVEs
- axios ^1.7.4 → ^1.15.0 (fixes GHSA-43fc-jf86-j433, GHSA-3p68-rc4w-qgx5, GHSA-fvcv-3m26-pcqx) - jsonwebtoken ^9.0.2 → ^9.0.3 (fixes GHSA-869p-cjfg-cm3x via jws upgrade) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent de720b3 commit b0904e7

2 files changed

Lines changed: 38 additions & 29 deletions

File tree

package-lock.json

Lines changed: 36 additions & 27 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,8 +31,8 @@
3131
"homepage": "https://github.com/frontegg/nodejs-sdk",
3232
"dependencies": {
3333
"@frontegg/entitlements-javascript-commons": "^1.1.3",
34-
"axios": "^1.7.4",
35-
"jsonwebtoken": "^9.0.2",
34+
"axios": "^1.15.0",
35+
"jsonwebtoken": "^9.0.3",
3636
"node-cache": "^5.1.2",
3737
"winston": "^3.18.3"
3838
},

0 commit comments

Comments
 (0)