Merge pull request #167 from kaleido-io/axios-cve

Update axios to 1.7.4

Author: EnriqueL8

Dockerfile

@@ -27,7 +27,7 @@ RUN trivy fs --format spdx-json --output /sbom.spdx.json /SBOM
 RUN trivy sbom /sbom.spdx.json --severity UNKNOWN,HIGH,CRITICAL --exit-code 1
 
 FROM $BASE_IMAGE
-RUN apk add curl=8.5.0-r0 jq=1.6-r2
+RUN apk add curl=8.9.0-r0 jq=1.6-r2
 RUN mkdir -p /app/contracts/source \
     && chgrp -R 0 /app/ \
     && chmod -R g+rwX /app/ \

package-lock.json

@@ -30,7 +30,7 @@
     "@nestjs/swagger": "^7.3.0",
     "@nestjs/terminus": "^10.2.2",
     "@nestjs/websockets": "^10.3.3",
-    "axios": "^1.6.7",
+    "axios": "^1.7.4",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
     "lru-cache": "^7.10.1",