Security issue: Uses a vulnerable version of Axios

[kwolniak]

Axios Cross-Site Request Forgery Vulnerability - GHSA-wf5p-g6vw-rhxx
Fixed in https://github.com/axios/axios/releases/tag/v0.28.0

Any chance to update?

[DamianGlowala]

For anyone concerned: use resolutions field in your package.json which will override the version this package is using:

"resolutions": {
    "axios": "0.28.0"
}

[r-marmitt]

As of npm cli v8.3.0 (2021-12-09) this can be solved using the overrides field of package.json.

But it would be awesome if it got updated.

"overrides": {
    "@nuxtjs/axios": {
      "axios": "^0.28.0"
    }
  }