axios Inefficient Regular Expression Complexity vulnerability

Description

axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity.

Recommendation

Update the axios package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.21.2
• Patched version(s): 0.21.2

References

• GHSA-cph5-m8f7-6c5x
• huntr.dev
• www.npmjs.com
• lists.apache.org
• www.oracle.com
• cert-portal.siemens.com
• CVE-2021-3749
• CWE-1333
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Axios is vulnerable to DoS attack through lack of data size check - CVE-2025-58754
• useragent Regular Expression Denial of Service vulnerability - CVE-2020-26311
• Parse Server before v3.4.1 vulnerable to Denial of Service - CVE-2019-1020012
• node-opcua-alarm-condition prototype pollution vulnerability - CVE-2024-57086

Tags:

npm

axios