axios Inefficient Regular Expression Complexity vulnerability

Description

axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity.

Recommendation

Update the axios package to the latest compatible version. Followings are version details:

Affected version(s): < 0.21.2
Patched version(s): 0.21.2

References

GHSA-cph5-m8f7-6c5x
huntr.dev
www.npmjs.com
lists.apache.org
www.oracle.com
cert-portal.siemens.com
CVE-2021-3749
CWE-1333
CWE-400
CAPEC-310
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for axios Inefficient Regular Expression Complexity vulnerability and gives you actionable findings to investigate.

Start a free scan

Related Issues

string-kit Inefficient Regular Expression Complexity vulnerability - CVE-2021-4299
Inefficient Regular Expression Complexity in validator.js - CVE-2021-3765
Inefficient Regular Expression Complexity in chalk/ansi-regex - CVE-2021-3807
Inefficient Regular Expression Complexity in handsontable - CVE-2021-23446

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

See something that needs correcting? Let us knowUpdated February 12, 2025