~ / search / GHSA-42xw-2xvc-qx8m

GHSA-42xw-2xvc-qx8m

Denial of Service in axios

Source: GitHub Advisory Database (reviewed) High CVE-2019-10742

Packages

EcosystemPackageAffectedFixed in
npm axios < 0.18.1 0.18.1

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of `axios` prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the `maxContentLength` property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. ## Recommendation Upgrade to 0.18.1 or later.

References

External links from the advisory. They lead to third-party sites.