Pensar - Upgrade axios from 1.6.7 to 1.8.2

[pensarapp]

Upgrading axios from 1.6.7 to 1.8.2

Fixes Summary

File

Fix Explanation

/frontend/package.json

The previously considered version 1.7.4, while addressing some SSRF risks related to the handling of baseURL, still remains vulnerable to scenarios where absolute URLs can bypass the baseURL configuration, leading to potential SSRF and credential leakage (as documented by CVE-2025-27152). Upgrading to version 1.8.2 ensures that the axios library now validates that combined URLs maintain the correct baseURL, thereby preventing absolute URLs from overriding the base configuration and leaking sensitive credentials. This upgrade thus mitigates both the vulnerabilities identified in versions 1.6.7 and 1.7.4.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
kemlang	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jul 25, 2025 1:33pm