Pensar - Upgrade axios from 1.6.0 to 1.8.2

[pensarapp]

Upgrading axios from 1.6.0 to 1.8.2

Fixes Summary

File

Fix Explanation

/package.json

Originally, upgrading to axios 1.7.4 was considered as it addressed the SSRF vulnerabilities by ensuring that absolute URLs do not override the defined baseURL. However, further analysis revealed that 1.7.4 still contains vulnerabilities, including exposure to SSRF and credential leakage. The minimum upgraded version that fully resolves these issues is 1.8.2, where enhanced URL validation ensures that even when a baseURL is set, absolute URLs must conform to it. This update mitigates the risk of unauthorized requests and protects against both SSRF and credential leakage vulnerabilities.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
kemlang	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jul 25, 2025 1:33pm