org.webjars.bowergithub.axios:axios@1.5.0 vulnerabilities
-
latest version
1.5.0
-
first published
6 years ago
-
latest version published
10 months ago
-
licenses detected
- [0.17.1,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.webjars.bowergithub.axios:axios package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
org.webjars.bowergithub.axios:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Prototype Pollution via the How to fix Prototype Pollution? A fix was pushed into the |
[0,)
|
org.webjars.bowergithub.axios:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS). An attacker can deplete system resources by providing a manipulated string as input to the format method, causing the regular expression to exhibit a time complexity of How to fix Regular Expression Denial of Service (ReDoS)? There is no fixed version for |
[0,)
|
org.webjars.bowergithub.axios:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF) due to inserting the How to fix Cross-site Request Forgery (CSRF)? A fix was pushed into the |
[0,)
|