Vulnerability: axios (npm)

[WilliamHolmes]

A vulnerable version of the axios package is being included by cldr-data-downloader

https://www.cve.org/CVERecord?id=CVE-2023-45857

│ └─┬ [email protected]
│   └─┬ [email protected]
│     └── [email protected]

[gan0928]

Any update?

[WilliamHolmes]

I guess there's a dependency on this ticket

[acofer]

#85 would fix it, opened two weeks ago. Any maintainers around to let us know if that can be merged?

[neginkheradmandian]

• update cldr-data to last version
• update cldr-data-downlaoder to last version
• add

"overrides": {
   "axios": "latest"
 }, 

to package.json resolve this issue for me

[jpshaw45]

When can we expect this release(#85) to be available?