All Topics
Developer
Axios Update
I realize this is low severity but,
/wp-content/plugins/admin-columns-pro/admin-columns/assets/js/table.js and some on the other JS are showing this in a security scan:
——-
Issue detail
We observed a vulnerable JavaScript library.
We detected axios version 1.7.9, which has the following vulnerability:
CVE-2025-27152: axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL
———-
Suggest update to 1.8.2 or later.
Any plans on updating those JS files in soon?
Thanks for noticing and bringing this to our attention.
We’ve updated our package.json to use the latest version of Axios for the next release.
Thanks, I will let my clients know.
You must be logged in to reply to this topic.