You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the problem
The package @sendgrid/mail depends on axios < 1.12.0, which is currently vulnerable to a DoS attack via unbounded memory allocation (see CVE/CVSS details and summary: GHSA-4hjh-wcwx-xvwj).
Security Impact
Projects using @sendgrid/mail cannot upgrade axios past 1.11.0, leaving them exposed to a known vulnerability. The issue is fixed in axios version 1.12.0 and above.
Suggested fix
Please update the @sendgrid/mail dependency to allow axios >= 1.12.0. This will allow downstream projects to patch this security issue.