Skip to content

Commit 00f083b

Browse files
andriy-sudoclaude
andcommitted
fix(security): bump axios override to 1.15.0 in examples/js (CVE-2025-62718)
Prior override >=1.13.5 <1.14.1 excluded the compromised 1.14.0 build. 1.14.1 was already clean, but 1.15.0 is the first release on the patched branch post-compromise. Aligns with org-wide axios floor. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 10b6f21 commit 00f083b

2 files changed

Lines changed: 12 additions & 9 deletions

File tree

examples/js/package-lock.json

Lines changed: 11 additions & 8 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

examples/js/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@
2424
"playwright-dompath": "^0.0.7"
2525
},
2626
"overrides": {
27-
"axios": ">=1.13.5 <1.14.1",
27+
"axios": "^1.15.0",
2828
"flatted": "^3.4.2",
2929
"minimatch": "^3.1.3"
3030
}

0 commit comments

Comments
 (0)