Axios Cross-Site Request Forgery Vulnerability

[KoenRijpstra]

Steps to Reproduce:

1. npm install @irys/sdk
2. npm audit

# npm audit report

axios  0.8.1 - 1.5.1
Severity: moderate
Axios Cross-Site Request Forgery Vulnerability - https://github.com/advisories/GHSA-wf5p-g6vw-rhxx
No fix available
node_modules/aptos/node_modules/axios
  aptos  <=1.13.3
  Depends on vulnerable versions of axios
  node_modules/aptos
    @irys/sdk  *
    Depends on vulnerable versions of aptos
    node_modules/@irys/sdk

[JesseTheRobot]

hey @KoenRijpstra , thanks for the issue - I'll be releasing a fix for this later today

[JesseTheRobot]

The latest SDK version now uses the latest version of axios

[KoenRijpstra]

@JesseTheRobot Latest SDK version still has this error.

[JesseTheRobot]

@KoenRijpstra It would appear so - the issues are now with a few of the SDK's deps, which I will attempt to update shortly (major one is aptos, which has a PR (#120) pending which should resolve most of the problem)

[JesseTheRobot]

Hey @KoenRijpstra , this should be fixed now.