Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Dependabot security alert on follow-redirects package #874

Open
robertbagge opened this issue Jan 12, 2024 · 0 comments
Open

[BUG] Dependabot security alert on follow-redirects package #874

robertbagge opened this issue Jan 12, 2024 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@robertbagge
Copy link

Description

Getting a security dependabot alert on the follow-redirects package, which is a dependency of axios. Issue has been resolved in version 1.15.4, which is included in axios version 1.16.5 - axios/axios@75af1cdff5b3a6ca3766d3d3afbc3115bb0811b8z

Versions

You can find the version of your @twilio/plugin-flex by typing twilio plugins.

package version
@twilio/plugin-flex N/A
flex-plugin-scripts 6.2.3
node v18.15.0
npm 9.5.0

Package.json

  "name": "test",
  "version": "0.8.0",
  "private": true,
  "dependencies": {
    "@twilio-paste/core": "^10.14.0",
    "@twilio-paste/icons": "^5.7.0",
    "@twilio/flex-plugin-scripts": "6.2.3",
    "prop-types": "^15.7.2",
    "react": "17.0.2",
    "react-dom": "17.0.2"
  },
  "devDependencies": {
    "@twilio/flex-ui": "2.4.1",
    "@types/express": "^4.17.20",
    "@types/handlebars": "^4.1.0",
    "express": "^4.18.2",
    "handlebars": "^4.7.8",
    "nodemon": "^3.0.1",
    "twilio-cli": "^5.5.0",
    "typescript": "^4"
  }
}

Steps to Reproduce

Please provide the steps to reproduce this bug:

  1. npm install
  2. check follow-redirects version in package-lock.json

Expected Behavior

version to be 1.15.4

Screenshots

Additional Context

Add any other context about the problem here.
Screenshot 2024-01-12 at 14 36 38

@robertbagge robertbagge added the bug Something isn't working label Jan 12, 2024
@aishwarya-tw aishwarya-tw assigned shwet2407 and unassigned ktalebian Apr 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants