Packages:

Select all that apply:

• @slack/web-api
• @slack/rtm-api
• @slack/webhooks
• @slack/oauth
• @slack/socket-mode
• @slack/types
• I don't know

Reproducible in:

The Slack SDK version

@slack/webhooks v7.0.6

Node.js runtime version

22.22.0

OS info

macOS

Steps to reproduce:

• https://nvd.nist.gov/vuln/detail/CVE-2026-25639
• GHSA-43fc-jf86-j433

Current axios version used in this repository is highly vulnerable

Please upgrade it to 1.13.5 as soon as possible

@zimeg

Expected result:

Upgrade axios dependency to 1.13.5