Dependency CVEs: axios, qs, jsrsasign

[edthri]

Flagged by Aikido:

axios:

CVE-2026-42043
CVE-2026-42044
CVE-2026-42264
CVE-2026-42039
CVE-2026-42038
CVE-2026-42035
CVE-2026-42033
CVE-2026-42041
CVE-2026-42042
CVE-2026-42037
CVE-2026-42036
CVE-2026-42034
CVE-2026-42040
AIKIDO-2026-10823
AIKIDO-2026-10820
AIKIDO-2026-10509
AIKIDO-2026-10822
AIKIDO-2026-10819

qs:

CVE-2026-8723

jsrsasign:

AIKIDO-2026-10527

[paul-hristea]

This is fixed with release 1.0.6. Thanks again @edthri !

Note that jsrsasign will be replaced with pki.js once #27 is merged.