Skip to content

Commit 8f43d98

Browse files
committed
fix: update axios and path-to-regexp to resolve security vulnerabilities
- Updated axios dependency to ^1.12.0 to fix CVE-2025-58754 (HIGH) - Added path-to-regexp resolution to ^6.3.0 to fix CVE-2024-52798 (HIGH) - All transitive dependencies now use secure versions - All tests pass successfully
1 parent af473ed commit 8f43d98

File tree

2 files changed

+5
-16
lines changed

2 files changed

+5
-16
lines changed

package.json

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
"@salesforce/kit": "^3.2.4",
1515
"@salesforce/lwc-dev-mobile-core": "4.0.0-alpha.14",
1616
"@salesforce/sf-plugins-core": "^11.2.4",
17-
"axios": "^1.13.2",
17+
"axios": "^1.12.0",
1818
"glob": "^10.5.0",
1919
"lwc": "~8.24.0",
2020
"node-fetch": "^3.3.2",
@@ -109,7 +109,8 @@
109109
"access": "public"
110110
},
111111
"resolutions": {
112-
"cliui": "7.0.4"
112+
"cliui": "7.0.4",
113+
"path-to-regexp": "^6.3.0"
113114
},
114115
"wireit": {
115116
"build": {

yarn.lock

Lines changed: 2 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -3731,7 +3731,7 @@ available-typed-arrays@^1.0.7:
37313731
dependencies:
37323732
possible-typed-array-names "^1.0.0"
37333733

3734-
axios@^1.13.2:
3734+
axios@^1.12.0:
37353735
version "1.13.2"
37363736
resolved "https://registry.yarnpkg.com/axios/-/axios-1.13.2.tgz#9ada120b7b5ab24509553ec3e40123521117f687"
37373737
integrity sha512-VPk9ebNqPcy5lRGuSlKx752IlDatOjT9paPlm8A7yOuW2Fbvp4X3JznJtT4f0GzGLLiWE9W8onz51SqLYwzGaA==
@@ -6438,11 +6438,6 @@ is-wsl@^3.1.0:
64386438
dependencies:
64396439
is-inside-container "^1.0.0"
64406440

6441-
6442-
version "0.0.1"
6443-
resolved "https://registry.yarnpkg.com/isarray/-/isarray-0.0.1.tgz#8a18acfca9a8f4177e09abfc6038939b05d1eedf"
6444-
integrity sha512-D2S+3GLxWH+uhrNEcoh/fnmYeP8E8/zHl644d/jdA0g2uyXvy3sb0qxotE+ne0LtccHknQzWwZEzhak7oJ0COQ==
6445-
64466441
[email protected], isarray@^1.0.0, isarray@~1.0.0:
64476442
version "1.0.0"
64486443
resolved "https://registry.yarnpkg.com/isarray/-/isarray-1.0.0.tgz#bb935d48582cba168c06834957a54a3e07124f11"
@@ -7784,14 +7779,7 @@ path-scurry@^2.0.0:
77847779
lru-cache "^11.0.0"
77857780
minipass "^7.1.2"
77867781

7787-
path-to-regexp@^1.7.0:
7788-
version "1.8.0"
7789-
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-1.8.0.tgz#887b3ba9d84393e87a0a0b9f4cb756198b53548a"
7790-
integrity sha512-n43JRhlUKUAlibEJhPeir1ncUID16QnEjNpwzNdO3Lm4ywrBpBZ5oLD0I6br9evr1Y9JTqwRtAh7JLoOzAQdVA==
7791-
dependencies:
7792-
isarray "0.0.1"
7793-
7794-
path-to-regexp@^6.2.1:
7782+
path-to-regexp@^1.7.0, path-to-regexp@^6.2.1, path-to-regexp@^6.3.0:
77957783
version "6.3.0"
77967784
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-6.3.0.tgz#2b6a26a337737a8e1416f9272ed0766b1c0389f4"
77977785
integrity sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ==

0 commit comments

Comments
 (0)