Dependabot alerts - out of date packages - including axios Critical CVE

[thorfi]

• Now including: GHSA-fvcv-3m26-pcqx

GitHub Dependabot is warning of security issues with package dependencies from this package when installed.

{
  "name": "something",
  "version": "0.1.0",
  "description": "something",
  "scripts": {},
  "author": "Aunty Grace <noreply@auntygrace.com.au>",
  "private": true,
  "license": "UNLICENSED",
  "devDependencies": {
    "@types/node": "^25.2.3",
    "directus-template-cli": "^0.7.5",
    "tsx": "^4.21.0"
  },
  "type": "module"
}

[thorfi]

@bryantgillespie - this is now extremely urgent as one of the alerts is a Critical 10/10 CVE for all axios<1.15

[bryantgillespie]

@bryantgillespie - this is now extremely urgent as one of the alerts is a Critical 10/10 CVE for all axios<1.15

Thanks for the bump. We'll update dependencies - but as I understand it the CVE for axios is unlikely to be exploitable in our context here.