Sahitya ChandraandGitHub 2911168e4e fix(security): upgrade axios to 1.15.0 to fix critical CVEs (#28850) ...

Upgrades axios from 1.13.5 to 1.15.0 in apps/api/v2 and the root
resolutions field to resolve two critical vulnerabilities:

- GHSA-3p68-rc4w-qgx5: NO_PROXY hostname normalization bypass leading to SSRF
- GHSA-fvcv-3m26-pcqx: Unrestricted cloud metadata exfiltration via header injection

Both CVEs are fixed in axios >=1.15.0.

2026-04-12 15:15:42 -03:00

..

api

fix(security): upgrade axios to 1.15.0 to fix critical CVEs (#28850)

2026-04-12 15:15:42 -03:00

web

chore(member-invite): early return for pending mutations while copying invite link (#28753)

2026-04-08 23:45:20 +05:30