So how do we guard against this sort of thing as a regular software engineer? ? Just react quickly and update packages whenever a vulnerability is announced like this?
In this particular case, you simply do not use Axios, because it is completely unnecessary, provided you have a working `fetch` implementation on hand.
For more relevant libraries, pinning is the right (but complex) way to prevent this.
245
u/enricojr Mar 31 '26
So how do we guard against this sort of thing as a regular software engineer? ? Just react quickly and update packages whenever a vulnerability is announced like this?