mirror of
https://github.com/infiniflow/ragflow.git
synced 2026-07-30 04:29:24 +08:00
## Summary Upgrade axios from 1.13.6 to 1.15.1, 0.31.1 to fix CVE-2026-42033. ## Vulnerability | Field | Value | |-------|-------| | **ID** | CVE-2026-42033 | | **Severity** | HIGH | | **Scanner** | trivy | | **Rule** | `CVE-2026-42033` | | **File** | `agent/sandbox/sandbox_base_image/nodejs/package-lock.json` | | **Assessment** | Likely exploitable | **Description**: axios: Axios: HTTP Transport Hijacking via Prototype Pollution --- *Automated security fix by [OrbisAI Security](https://orbisappsec.com)*