Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -60,6 +60,7 @@
},
"resolutions": {
"appium-chromedriver@npm:5.6.73/@xmldom/xmldom": "0.8.10",
"axios": "^1.13.5",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale form-data resolution conflicts with new axios dependency

Medium Severity

The resolutions field pins form-data to 4.0.4, but axios 1.13.5 declares a dependency on form-data: ^4.0.5 (visible in the lockfile). Since 4.0.4 is below the ^4.0.5 minimum, axios is running with an unsatisfied dependency. Yarn resolutions silently override the requirement, so no install error occurs, but axios may be missing bug fixes or features it expects from form-data 4.0.5+. The form-data resolution needs to be bumped to at least 4.0.5.

Additional Locations (1)

Fix in Cursor Fix in Web

"fast-xml-parser": "^5.3.6",
"form-data": "4.0.4",
"qs": "^6.14.2",
Expand Down
75 changes: 10 additions & 65 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -14633,69 +14633,14 @@ __metadata:
languageName: node
linkType: hard

"axios@npm:1.12.0":
version: 1.12.0
resolution: "axios@npm:1.12.0"
"axios@npm:^1.13.5":
version: 1.13.5
resolution: "axios@npm:1.13.5"
dependencies:
follow-redirects: ^1.15.6
form-data: ^4.0.4
follow-redirects: ^1.15.11
form-data: ^4.0.5
proxy-from-env: ^1.1.0
checksum: f2a109efea16711907ae86acc46434d52da28e889bf1d2fc2b66844e82c9908f6d96d988ad9043b37d4146abc182e67d61abd87367152bbbc1cd73afa3c5de71
languageName: node
linkType: hard

"axios@npm:1.6.3":
version: 1.6.3
resolution: "axios@npm:1.6.3"
dependencies:
follow-redirects: ^1.15.0
form-data: ^4.0.0
proxy-from-env: ^1.1.0
checksum: 07ef3bb83fc2dacc1ae2c97f2bbd04ef7701f5655f9037789d79ee78b698ffa50eaa8465c2017d4d3e9ce7d94cb779f730acaab32ce9036d0a4933c1e89df4da
languageName: node
linkType: hard

"axios@npm:1.7.2":
version: 1.7.2
resolution: "axios@npm:1.7.2"
dependencies:
follow-redirects: ^1.15.6
form-data: ^4.0.0
proxy-from-env: ^1.1.0
checksum: e457e2b0ab748504621f6fa6609074ac08c824bf0881592209dfa15098ece7e88495300e02cd22ba50b3468fd712fe687e629dcb03d6a3f6a51989727405aedf
languageName: node
linkType: hard

"axios@npm:1.7.3":
version: 1.7.3
resolution: "axios@npm:1.7.3"
dependencies:
follow-redirects: ^1.15.6
form-data: ^4.0.0
proxy-from-env: ^1.1.0
checksum: bc304d6da974922342aed7c33155934354429cdc7e1ba9d399ab9ff3ac76103f3697eeedf042a634d43cdae682182bcffd942291db42d2be45b750597cdd5eef
languageName: node
linkType: hard

"axios@npm:1.9.0":
version: 1.9.0
resolution: "axios@npm:1.9.0"
dependencies:
follow-redirects: ^1.15.6
form-data: ^4.0.0
proxy-from-env: ^1.1.0
checksum: 631f02c9c279f2ae90637a4989cc9d75c1c27aefd16b6e8eb90f98a4d0bddaccfd1cb1387be12101d1ab0f9bbf0c47e2451b4de0cf2870462a7d9ed3de8da3f2
languageName: node
linkType: hard

"axios@npm:^1.4.0, axios@npm:^1.6.5, axios@npm:^1.6.7, axios@npm:^1.7.4, axios@npm:^1.x":
version: 1.8.4
resolution: "axios@npm:1.8.4"
dependencies:
follow-redirects: ^1.15.6
form-data: ^4.0.0
proxy-from-env: ^1.1.0
checksum: e901dc1730bdcd769839b3d93ae6d6457a53d79b19a0eb623ebfea333441259ab51e63ca118baa47a5156567401466ac739f31087b4ee5e6770ab2e227484538
checksum: 985024c4a32f837053f198f02a308fd6f8bfb4053a2f21e39e37992bc6d06917f008679c36b3e7f0f0c9060c85ffe37c61e58d2ac662595d68dc1b89cef78de8
languageName: node
linkType: hard

Expand Down Expand Up @@ -20478,13 +20423,13 @@ __metadata:
languageName: node
linkType: hard

"follow-redirects@npm:^1.15.0, follow-redirects@npm:^1.15.6":
version: 1.15.6
resolution: "follow-redirects@npm:1.15.6"
"follow-redirects@npm:^1.15.11":
version: 1.15.11
resolution: "follow-redirects@npm:1.15.11"
peerDependenciesMeta:
debug:
optional: true
checksum: a62c378dfc8c00f60b9c80cab158ba54e99ba0239a5dd7c81245e5a5b39d10f0c35e249c3379eae719ff0285fff88c365dd446fab19dee771f1d76252df1bbf5
checksum: 20bf55e9504f59e6cc3743ba27edb2ebf41edea1baab34799408f2c050f73f0c612728db21c691276296d2795ea8a812dc532a98e8793619fcab91abe06d017f
languageName: node
linkType: hard

Expand Down
Loading