Is there an existing issue for this?
This issue exists in the latest npm version
Current Behavior
With min-release-age=2 in .npmrc:
% npm audit fix
up to date, audited 2348 packages in 2s
524 packages are looking for funding
run `npm fund` for details
# npm audit report
axios <1.15.0
Severity: critical
Axios has a NO_PROXY Hostname Normalization Bypass Leads to SSRF - https://github.com/advisories/GHSA-3p68-rc4w-qgx5
fix available via `npm audit fix`
node_modules/axios
1 critical severity vulnerability
To address all issues, run:
npm audit fix
Expected Behavior
Without that setting:
npm audit fix
changed 1 package, and audited 2348 packages in 2s
524 packages are looking for funding
run `npm fund` for details
found 0 vulnerabilities
Steps To Reproduce
No response
Environment
No response
Is there an existing issue for this?
This issue exists in the latest npm version
Current Behavior
With
min-release-age=2in.npmrc:Expected Behavior
Without that setting:
Steps To Reproduce
No response
Environment
No response