VDB
KO
HIGH 7.5

GHSA-42xw-2xvc-qx8m

Denial of Service in axios

Details

Versions of `axios` prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the `maxContentLength` property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service.

## Recommendation

Upgrade to 0.18.1 or later.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm / axios
Introduced in: 0 Fixed in: 0.18.1
Fix npm install axios@0.18.1

References