Bump Axios to ^0.21.1 (#208)

This version fixes an SSRF vulnerability: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28168 The changelog since 0.20.0 seems reasonable: https://github.com/axios/axios/blob/a64050a6cfbcc708a55a7dc8030d85b1c78cdf38/CHANGELOG.md#0211-december-21-2020 Closes #200.
auth0 · Dec 29, 2020 · 3bbe93f · 3bbe93f
1 parent 6fa1db0
commit 3bbe93f
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 7 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -6,7 +6,7 @@
   "types": "index.d.ts",
   "dependencies": {
     "@types/express-jwt": "0.0.42",
-    "axios": "^0.20.0",
+    "axios": "^0.21.1",
     "debug": "^4.1.0",
     "http-proxy-agent": "^4.0.1",
     "https-proxy-agent": "^5.0.0",