#1415 [security risk] CVE-2025-27152 in axios <1.8.2 Issue created by barryels The CVE-2025-27152 vulnerability still exists with the latest version of pact. Most users perhaps don't face this issue since they have the latest axios version installed as adirect dependency, but for projects where axios is not directly installed, we rely on the version defined in pact's package.json. The Renovate bot has recently bumped axios in the package-lock.json (#1395), but not in the package.json file. Related bug fix in axios: https://github.com/axios/axios/releases/tag/v1.8.2 Related PRs: #1396 #1404 (failing tests) pact-foundation/pact-js