Axios NPM

Hello Ben,

We do not (indirectly or directly) reference any vulnerable versions of the Axios package in our OOTB Angular code. We are monitoring the current situation around this package.

Thanks Hanno Bunjes 

I think the bigger concern is the amount of reported supply chain attacks that are happening across NPM/GIT recently. It does cause a bit of concern with more and more reliance on open source code. I also remember articles about AI performing supply chain attacks, so this will only get worse and harder to trace.

Hi Ben,

The Axios incident is not the first of its kind, and it will certainly not be the last. We have internal systems that continuously monitor our dependencies. Our security team can be reached at https://trust.oneidentity.com for any further questions.

Hi Ben,

The Axios incident is not the first of its kind, and it will certainly not be the last. We have internal systems that continuously monitor our dependencies. Our security team can be reached at https://trust.oneidentity.com for any further questions.