This is an automated email from the ASF dual-hosted git repository.
kfaraz pushed a commit to branch 38.0.0
in repository https://gitbox.apache.org/repos/asf/druid.git
The following commit(s) were added to refs/heads/38.0.0 by this push:
new 1bcae25a84c build(deps): bump axios from 1.15.2 to 1.20.0 and
form-data from 4.0.4 to 4.0.6 (#20361)
1bcae25a84c is described below
commit 1bcae25a84c91abed3683242e9cb1fcacf4378de
Author: Kashif Faraz <[email protected]>
AuthorDate: Wed Sep 16 17:04:42 2026 +0530
build(deps): bump axios from 1.15.2 to 1.20.0 and form-data from 4.0.4 to
4.0.6 (#20361)
Fixes multiple security vulnerabilities in the web console:
- axios 1.20.0: fixes GHSA-pjwm-pj3p-43mv (NO_PROXY bypass via IPv6-mapped
addresses),
GHSA-j5f8-grm9-p9fc and GHSA-p92q-9vqr-4j8v (Proxy-Authorization header
leakage on redirect),
GHSA-gcfj-64vw-6mp9 and GHSA-35jp-ww65-95wh (prototype pollution MITM),
GHSA-hfxv-24rg-xrqf (ReDoS in cookie handling),
GHSA-777c-7fjr-54vf (fetch adapter ignores size limits)
- form-data 4.0.6: fixes GHSA-hmw2-7cc7-3qxx (CRLF injection in multipart
field names)
---
licenses.yaml | 4 +-
web-console/package-lock.json | 103 ++++++++++++++++++++----------------------
web-console/package.json | 5 +-
3 files changed, 54 insertions(+), 58 deletions(-)
diff --git a/licenses.yaml b/licenses.yaml
index 1af4b58c461..5f55d52c834 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -5759,7 +5759,7 @@ license_category: binary
module: web-console
license_name: MIT License
copyright: Matt Zabriskie
-version: 1.15.0
+version: 1.20.0
license_file_path: licenses/bin/axios.MIT
---
@@ -6235,7 +6235,7 @@ license_category: binary
module: web-console
license_name: MIT License
copyright: Felix Geisendörfer
-version: 4.0.4
+version: 4.0.6
license_file_path: licenses/bin/form-data.MIT
---
diff --git a/web-console/package-lock.json b/web-console/package-lock.json
index eff1c5620fc..a19b1e06a17 100644
--- a/web-console/package-lock.json
+++ b/web-console/package-lock.json
@@ -18,7 +18,7 @@
"@fontsource/open-sans": "^5.0.30",
"@internationalized/date": "^3.5.6",
"ace-builds": "~1.5.3",
- "axios": "^1.15.2",
+ "axios": "^1.20.0",
"chronoshift": "^1.2.3",
"classnames": "^2.2.6",
"copy-to-clipboard": "^3.3.3",
@@ -4958,7 +4958,6 @@
"version": "6.0.2",
"resolved":
"https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz";,
"integrity":
"sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
- "dev": true,
"dependencies": {
"debug": "4"
},
@@ -4970,7 +4969,6 @@
"version": "4.3.3",
"resolved": "https://registry.npmjs.org/debug/-/debug-4.3.3.tgz";,
"integrity":
"sha512-/zxw5+vh1Tfv+4Qn7a5nsbcJKPaSvCDhojn6FEl9vupwK2VCSDtEiEtqr8DFtzYFOdz63LBkxec7DYuc2jon6Q==",
- "dev": true,
"dependencies": {
"ms": "2.1.2"
},
@@ -4986,8 +4984,7 @@
"node_modules/agent-base/node_modules/ms": {
"version": "2.1.2",
"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz";,
- "integrity":
"sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
- "dev": true
+ "integrity":
"sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
},
"node_modules/ajv": {
"version": "6.12.6",
@@ -5363,7 +5360,8 @@
"node_modules/asynckit": {
"version": "0.4.0",
"resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz";,
- "integrity": "sha1-x57Zf380y48robyXkLzDZkdLS3k="
+ "integrity":
"sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==",
+ "license": "MIT"
},
"node_modules/autoprefixer": {
"version": "10.4.20",
@@ -5419,12 +5417,14 @@
}
},
"node_modules/axios": {
- "version": "1.15.2",
- "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.2.tgz";,
- "integrity":
"sha512-wLrXxPtcrPTsNlJmKjkPnNPK2Ihe0hn0wGSaTEiHRPxwjvJwT3hKmXF4dpqxmPO9SoNb2FsYXj/xEo0gHN+D5A==",
+ "version": "1.20.0",
+ "resolved": "https://registry.npmjs.org/axios/-/axios-1.20.0.tgz";,
+ "integrity":
"sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==",
+ "license": "MIT",
"dependencies": {
- "follow-redirects": "^1.15.11",
- "form-data": "^4.0.5",
+ "follow-redirects": "^1.16.0",
+ "form-data": "^4.0.6",
+ "https-proxy-agent": "^5.0.1",
"proxy-from-env": "^2.1.0"
}
},
@@ -6141,6 +6141,7 @@
"version": "1.0.8",
"resolved":
"https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz";,
"integrity":
"sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
+ "license": "MIT",
"dependencies": {
"delayed-stream": "~1.0.0"
},
@@ -7155,7 +7156,8 @@
"node_modules/delayed-stream": {
"version": "1.0.0",
"resolved":
"https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz";,
- "integrity": "sha1-3zrhmayt+31ECqrgsp4icrJOxhk=",
+ "integrity":
"sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==",
+ "license": "MIT",
"engines": {
"node": ">=0.4.0"
}
@@ -8816,9 +8818,9 @@
"license": "ISC"
},
"node_modules/follow-redirects": {
- "version": "1.15.11",
- "resolved":
"https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz";,
- "integrity":
"sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
+ "version": "1.16.0",
+ "resolved":
"https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz";,
+ "integrity":
"sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==",
"funding": [
{
"type": "individual",
@@ -8845,16 +8847,16 @@
}
},
"node_modules/form-data": {
- "version": "4.0.5",
- "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz";,
- "integrity":
"sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
+ "version": "4.0.6",
+ "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz";,
+ "integrity":
"sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==",
"license": "MIT",
"dependencies": {
"asynckit": "^0.4.0",
"combined-stream": "^1.0.8",
"es-set-tostringtag": "^2.1.0",
- "hasown": "^2.0.2",
- "mime-types": "^2.1.12"
+ "hasown": "^2.0.4",
+ "mime-types": "^2.1.35"
},
"engines": {
"node": ">= 6"
@@ -9297,9 +9299,10 @@
}
},
"node_modules/hasown": {
- "version": "2.0.2",
- "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz";,
- "integrity":
"sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+ "version": "2.0.4",
+ "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz";,
+ "integrity":
"sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
+ "license": "MIT",
"dependencies": {
"function-bind": "^1.1.2"
},
@@ -9563,7 +9566,6 @@
"version": "5.0.1",
"resolved":
"https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz";,
"integrity":
"sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==",
- "dev": true,
"dependencies": {
"agent-base": "6",
"debug": "4"
@@ -9576,7 +9578,6 @@
"version": "4.3.3",
"resolved": "https://registry.npmjs.org/debug/-/debug-4.3.3.tgz";,
"integrity":
"sha512-/zxw5+vh1Tfv+4Qn7a5nsbcJKPaSvCDhojn6FEl9vupwK2VCSDtEiEtqr8DFtzYFOdz63LBkxec7DYuc2jon6Q==",
- "dev": true,
"dependencies": {
"ms": "2.1.2"
},
@@ -9592,8 +9593,7 @@
"node_modules/https-proxy-agent/node_modules/ms": {
"version": "2.1.2",
"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz";,
- "integrity":
"sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
- "dev": true
+ "integrity":
"sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
},
"node_modules/human-signals": {
"version": "2.1.0",
@@ -22121,7 +22121,6 @@
"version": "6.0.2",
"resolved":
"https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz";,
"integrity":
"sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
- "dev": true,
"requires": {
"debug": "4"
},
@@ -22130,7 +22129,6 @@
"version": "4.3.3",
"resolved": "https://registry.npmjs.org/debug/-/debug-4.3.3.tgz";,
"integrity":
"sha512-/zxw5+vh1Tfv+4Qn7a5nsbcJKPaSvCDhojn6FEl9vupwK2VCSDtEiEtqr8DFtzYFOdz63LBkxec7DYuc2jon6Q==",
- "dev": true,
"requires": {
"ms": "2.1.2"
}
@@ -22138,8 +22136,7 @@
"ms": {
"version": "2.1.2",
"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz";,
- "integrity":
"sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
- "dev": true
+ "integrity":
"sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
}
}
},
@@ -22406,7 +22403,7 @@
"asynckit": {
"version": "0.4.0",
"resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz";,
- "integrity": "sha1-x57Zf380y48robyXkLzDZkdLS3k="
+ "integrity":
"sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q=="
},
"autoprefixer": {
"version": "10.4.20",
@@ -22432,12 +22429,13 @@
}
},
"axios": {
- "version": "1.15.2",
- "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.2.tgz";,
- "integrity":
"sha512-wLrXxPtcrPTsNlJmKjkPnNPK2Ihe0hn0wGSaTEiHRPxwjvJwT3hKmXF4dpqxmPO9SoNb2FsYXj/xEo0gHN+D5A==",
+ "version": "1.20.0",
+ "resolved": "https://registry.npmjs.org/axios/-/axios-1.20.0.tgz";,
+ "integrity":
"sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==",
"requires": {
- "follow-redirects": "^1.15.11",
- "form-data": "^4.0.5",
+ "follow-redirects": "^1.16.0",
+ "form-data": "^4.0.6",
+ "https-proxy-agent": "^5.0.1",
"proxy-from-env": "^2.1.0"
}
},
@@ -23665,7 +23663,7 @@
"delayed-stream": {
"version": "1.0.0",
"resolved":
"https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz";,
- "integrity": "sha1-3zrhmayt+31ECqrgsp4icrJOxhk="
+ "integrity":
"sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ=="
},
"depd": {
"version": "1.1.2",
@@ -24880,9 +24878,9 @@
"dev": true
},
"follow-redirects": {
- "version": "1.15.11",
- "resolved":
"https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz";,
- "integrity":
"sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ=="
+ "version": "1.16.0",
+ "resolved":
"https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz";,
+ "integrity":
"sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw=="
},
"for-each": {
"version": "0.3.3",
@@ -24894,15 +24892,15 @@
}
},
"form-data": {
- "version": "4.0.5",
- "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz";,
- "integrity":
"sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
+ "version": "4.0.6",
+ "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz";,
+ "integrity":
"sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==",
"requires": {
"asynckit": "^0.4.0",
"combined-stream": "^1.0.8",
"es-set-tostringtag": "^2.1.0",
- "hasown": "^2.0.2",
- "mime-types": "^2.1.12"
+ "hasown": "^2.0.4",
+ "mime-types": "^2.1.35"
}
},
"forwarded": {
@@ -25195,9 +25193,9 @@
}
},
"hasown": {
- "version": "2.0.2",
- "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz";,
- "integrity":
"sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+ "version": "2.0.4",
+ "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz";,
+ "integrity":
"sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
"requires": {
"function-bind": "^1.1.2"
}
@@ -25411,7 +25409,6 @@
"version": "5.0.1",
"resolved":
"https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz";,
"integrity":
"sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==",
- "dev": true,
"requires": {
"agent-base": "6",
"debug": "4"
@@ -25421,7 +25418,6 @@
"version": "4.3.3",
"resolved": "https://registry.npmjs.org/debug/-/debug-4.3.3.tgz";,
"integrity":
"sha512-/zxw5+vh1Tfv+4Qn7a5nsbcJKPaSvCDhojn6FEl9vupwK2VCSDtEiEtqr8DFtzYFOdz63LBkxec7DYuc2jon6Q==",
- "dev": true,
"requires": {
"ms": "2.1.2"
}
@@ -25429,8 +25425,7 @@
"ms": {
"version": "2.1.2",
"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz";,
- "integrity":
"sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
- "dev": true
+ "integrity":
"sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
}
}
},
@@ -27617,7 +27612,7 @@
"decimal.js": "^10.4.2",
"domexception": "^4.0.0",
"escodegen": "^2.0.0",
- "form-data": "^4.0.4",
+ "form-data": "^4.0.6",
"html-encoding-sniffer": "^3.0.0",
"http-proxy-agent": "^5.0.0",
"https-proxy-agent": "^5.0.1",
diff --git a/web-console/package.json b/web-console/package.json
index edad80f775f..37cd2217c74 100644
--- a/web-console/package.json
+++ b/web-console/package.json
@@ -61,7 +61,7 @@
"@fontsource/open-sans": "^5.0.30",
"@internationalized/date": "^3.5.6",
"ace-builds": "~1.5.3",
- "axios": "^1.15.2",
+ "axios": "^1.20.0",
"chronoshift": "^1.2.3",
"classnames": "^2.2.6",
"copy-to-clipboard": "^3.3.3",
@@ -161,6 +161,7 @@
"webpack-dev-server": "^5.2.2"
},
"overrides": {
- "@types/react": "$@types/react"
+ "@types/react": "$@types/react",
+ "form-data": "^4.0.6"
}
}
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
