[Bug]: axios update to 1.15.1 required to resolve CVE-2026-42035

[ahayes91]

Describe the bug

We've got Snyk running in our organization and today a critical issue was flagged originating from the use of axios in @storybook/test-runner

https://security.snyk.io/vuln/SNYK-JS-AXIOS-16298058

@storybook/test-runner@0.24.2 › jest-process-manager@0.4.0 › wait-on@7.2.0 › axios@1.15.0

One workaround is to use an override in your package.json:

  "overrides": {
    "axios": "1.15.1"
  },

To Reproduce

Snyk and CVE links above!

System

N/A

Additional context

N/A

[ahayes91]

https://security.snyk.io/vuln/SNYK-JS-AXIOS-16417750

https://www.youtube.com/watch?v=jEI3N9kIyP4