[Bug 1229427] VUL-0: CVE-2024-39338: python-nbdime: axios: server-side request forgery due to requests for path relative URLs being processed as protocol relative URLs

https://bugzilla.suse.com/show_bug.cgi?id=1229427 https://bugzilla.suse.com/show_bug.cgi?id=1229427#c4 --- Comment #4 from Nico Krapp <nico.krapp@suse.com> --- Upstream told me that axios is very likely not part of the shipped releases but some kind of dev dependency and this is consistent with my attempt to find any axios source code in the package. I am still investigating this. -- You are receiving this mail because: You are on the CC list for the bug.