Vulnerable JS Library axios 1.2.1

[MarioBinder]

Cross-site Request Forgery (CSRF)

Server Version: 10.0.1

Url:
**/media/assets/frontend/static/js/commons.chunk.ac28aae69e40.js

return"[Axios v1.2.1] Transitional

The identified library axios, version 1.2.1 is vulnerable.
CVE-2023-45857

Affecting axios package, versions >=0.8.1 <0.28.0 >=1.0.0 <1.6.0
Please upgrade to the latest version of axios.

References:
axios/axios#6022
axios/axios#6300
https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459
axios/axios#6028
axios/axios#6006
axios/axios@96ee232
https://nvd.nist.gov/vuln/detail/CVE-2023-45857
GHSA-wf5p-g6vw-rhxx
https://github.com/axios/axios/releases/tag/v1.6.0

[freeplant]

Please test with newest 11.0 version. 10.0 version is out of support life time.