Description
Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service.
Recommendation
Update the axios package to the latest compatible version. Followings are version details:
- Affected version(s): <= 0.18.0
- Patched version(s): 0.18.1
References
Could your website be exposed too?
SmartScanner can check your website for Denial of Service in axios and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Regular Expression Denial of Service in remarkable - CVE-2019-12041
- Regular Expression Denial of Service (ReDoS) in lodash - lodash - CVE-2019-1010266
- Regular Expression Denial of Service (ReDoS) in lodash - lodash-es - GHSA-x5rq-j2xg-h7qm - CVE-2019-1010266
- Regular Expression Denial of Service (ReDoS) in lodash - lodash-amd - CVE-2019-1010266
You might also like:
See something that needs correcting? Let us knowUpdated April 14, 2023