Commit 72114de
committed
fix: add npm override for axios to address CVE-2025-58754
Axios versions prior to 1.9.1 are vulnerable to Denial of Service via
massive data schemas (CVE-2025-58754). The vulnerable version (1.9.0)
is pulled as a transitive dependency from @edx/frontend-platform.
Adding an npm override forces resolution to a patched version without
changing the frontend-platform version, avoiding breaking changes.1 parent 89d5d3c commit 72114de
1 file changed
Lines changed: 3 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
96 | 96 | | |
97 | 97 | | |
98 | 98 | | |
| 99 | + | |
| 100 | + | |
| 101 | + | |
99 | 102 | | |
100 | 103 | | |
0 commit comments