[Cycode] Fix for vulnerable manifest file dependency - axios updated to version 1.12.0

[cycode-security]

Cycode Vulnerable Dependencies Update

This pull request updates the following manifest file:

File Path	Number of packages to update
package.json	1

📂 package.json

1 package will be updated to resolve vulnerabilities:

Package Name	Current Version	Updated Version
axios	1.6.4	1.12.0

[cycode-security]

❗Cycode: Security vulnerability found in newly introduced dependency.

Severity	Critical
Issue	flat vulnerable to Prototype Pollution: CVE-2020-36632
Ecosystem	NPM
Dependency	flat
Dependency Paths	mocha 7.2.0 -> yargs-unparser 1.6.0 -> flat 4.1.1
Direct Dependency	No
Development Dependency	Yes
Upgrade	5.0.1

flat helps flatten/unflatten nested Javascript objects. A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). It is possible to initiate the attack remotely. Upgrading to version 5.0.1 can address this issue. The name of the patch is 20ef0ef55dfa028caddaedbcb33efbdb04d18e13. It is recommended to upgrade the affected component. The identifier VDB-216777 was assigned to this vulnerability.

Description

Detects when new vulnerabilities affect your dependencies.

Tell us how you wish to proceed using one of the following commands:

Tag	Short Description
#cycode_ignore_manifest_here <reason>	Applies to this manifest in this request only
#cycode_ignore_package_here <reason>	Applies to this manifest for this package in this request only

⚠️ When commenting on Github, you may need to refresh the page to see the latest updates.