Skip to content

fix: upgrade axios to ^1.13.5 to remediate CVE-2026-25639#1178

Merged
manisha1997 merged 2 commits intomainfrom
copilot/fix-axios-vulnerability
Mar 10, 2026
Merged

fix: upgrade axios to ^1.13.5 to remediate CVE-2026-25639#1178
manisha1997 merged 2 commits intomainfrom
copilot/fix-axios-vulnerability

Conversation

Copy link
Contributor

Copilot AI commented Feb 27, 2026

axios versions prior to 1.13.5 are affected by CVE-2026-25639, a high-severity vulnerability tracked in axios/axios#7417.

Changes

  • package.json: Bumps the axios version constraint from ^1.12.0^1.13.5, which is the first version containing the fix.
Original prompt

This section details on the original issue you should resolve

<issue_title>Vulnerability in axios - CVE-2026-25639</issue_title>
<issue_description>### Vulnerability Summary
Vulnerability found in the axios dependency of twilio.

Link to the relevant CVE: GHSA-43fc-jf86-j433
Link to the relevant issue in the dependency's repository: axios/axios#7417

Fix to apply

The issue has been fixed in v1.13.5 of axios
</issue_description>

Comments on the Issue (you are @copilot in this section)


💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

Co-authored-by: manisha1997 <28821901+manisha1997@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix vulnerability in axios dependency fix: upgrade axios to ^1.13.5 to remediate CVE-2026-25639 Feb 27, 2026
@manisha1997 manisha1997 marked this pull request as ready for review February 27, 2026 13:31
@sonarqubecloud
Copy link

@manisha1997 manisha1997 merged commit 04763df into main Mar 10, 2026
14 checks passed
@manisha1997 manisha1997 deleted the copilot/fix-axios-vulnerability branch March 10, 2026 05:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Vulnerability in axios - CVE-2026-25639

3 participants