mirror of
https://github.com/infiniflow/ragflow.git
synced 2026-07-30 04:29:24 +08:00
2a187e607f
## Summary Upgrade axios from 1.13.6 to 1.15.1, 0.31.1 to fix CVE-2026-42033. ## Vulnerability | Field | Value | |-------|-------| | **ID** | CVE-2026-42033 | | **Severity** | HIGH | | **Scanner** | trivy | | **Rule** | `CVE-2026-42033` | | **File** | `agent/sandbox/sandbox_base_image/nodejs/package-lock.json` | | **Assessment** | Likely exploitable | **Description**: axios: Axios: HTTP Transport Hijacking via Prototype Pollution --- *Automated security fix by [OrbisAI Security](https://orbisappsec.com)*
16 lines
268 B
JSON
16 lines
268 B
JSON
{
|
|
"name": "nodejs",
|
|
"version": "1.0.0",
|
|
"main": "index.js",
|
|
"scripts": {
|
|
"test": "echo \"Error: no test specified\" && exit 1"
|
|
},
|
|
"keywords": [],
|
|
"author": "",
|
|
"license": "ISC",
|
|
"description": "",
|
|
"dependencies": {
|
|
"axios": "^1.15.1"
|
|
}
|
|
}
|