funny enough the CTO sent a broadcast that morning for all engineering teams to lock down their axios versions

that was my first time realising that the caret ^ in package versions could be a potential vulnerability cause it allows for minimal updates. Never even thought about it before