Upgrading axios 0.20 to 0.21
Safe0.20.0 → 0.21.4Security2Fixed23Other61
SecurityHigh · CVSS 7.5axios Inefficient Regular Expression Complexity vulnerabilityGHSA-cph5-m8f7-6c5x · CVE-2021-3749 ↗
SafeUpgrade verdict
2 security fixes. Nothing to change in your code.
In plain terms
- axios Inefficient Regular Expression Complexity vulnerability
- Axios vulnerable to Server-Side Request Forgery
Must act 2 items need code or config changes
What you must change
Security2
axios Inefficient Regular Expression Complexity vulnerability
High · CVSS 7.5Axios vulnerable to Server-Side Request Forgery
Moderate · CVSS 5.9API changes
Generated by DepDelta from published .d.ts files. Not mixed with prose notes.
- removed:
const Axios: AxiosStatic - removed:
default Axios - changed:
method AxiosInterceptorManager.use(onFulfilled?: (value: V) => V | Promise<V>, onRejected?: (error: any) => any): number → method AxiosInterceptorManager.use<T = V>(onFulfilled?: (value: V) => T | Promise<T>, onRejected?: (error: any) => any): number - changed:
property AxiosRequestConfig.onDownloadProgress?: (progressEvent: ProgressEvent) => void → property AxiosRequestConfig.onDownloadProgress?: (progressEvent: any) => void - changed:
property AxiosRequestConfig.onUploadProgress?: (progressEvent: ProgressEvent) => void → property AxiosRequestConfig.onUploadProgress?: (progressEvent: any) => void - changed:
property AxiosRequestConfig.validateStatus?: ((status: number) => boolean | null) → property AxiosRequestConfig.validateStatus?: ((status: number) => boolean) | null - added:
const axios: AxiosStatic - added:
default axios - added:
interface TransitionalOptions - added:
method AxiosStatic.isAxiosError(payload: any): payload is AxiosError - added:
property AxiosRequestConfig.transitional?: TransitionalOptions - added:
property TransitionalOptions.clarifyTimeoutError: boolean - added:
property TransitionalOptions.forcedJSONParsing: boolean - added:
property TransitionalOptions.silentJSONParsing: boolean