VDB
Sign up
HIGH7.5

GHSA-42xw-2xvc-qx8m

Denial of Service in axios

Quick fix

GHSA-42xw-2xvc-qx8m — axios: upgrade to the fixed version with the command below.

npm install axios@0.18.1

Details

Versions of `axios` prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the `maxContentLength` property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service.

## Recommendation

Upgrade to 0.18.1 or later.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/axios
Introduced in: 0Fixed in: 0.18.1
Fixnpm install axios@0.18.1

References