Merge pull request #167 from kaleido-io/axios-cve

Update axios to 1.7.4
hyperledger · Aug 15, 2024 · 70b915a · 70b915a
2 parents 5b12df2 + 56a308b
commit 70b915a
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 11 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -27,7 +27,7 @@ RUN trivy fs --format spdx-json --output /sbom.spdx.json /SBOM
 RUN trivy sbom /sbom.spdx.json --severity UNKNOWN,HIGH,CRITICAL --exit-code 1
 
 FROM $BASE_IMAGE
-RUN apk add curl=8.5.0-r0 jq=1.6-r2
+RUN apk add curl=8.9.0-r0 jq=1.6-r2
 RUN mkdir -p /app/contracts/source \
     && chgrp -R 0 /app/ \
     && chmod -R g+rwX /app/ \

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -30,7 +30,7 @@
     "@nestjs/swagger": "^7.3.0",
     "@nestjs/terminus": "^10.2.2",
     "@nestjs/websockets": "^10.3.3",
-    "axios": "^1.6.7",
+    "axios": "^1.7.4",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
     "lru-cache": "^7.10.1",