axios vulnerabilities

Promise based HTTP client for the browser and node.js

1.12.2

11 years ago

5 hours ago

Known vulnerabilities in the axios package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling	<1.12.0
M Server-side Request Forgery (SSRF)	<0.30.0>=1.0.0 <1.8.3
M Server-side Request Forgery (SSRF)	<0.30.0>=1.0.0 <1.8.2
H Server-side Request Forgery (SSRF)	>=1.3.2 <1.7.4
H Prototype Pollution	>=0.28.0 <0.29.0>=1.0.0 <1.6.4
M Regular Expression Denial of Service (ReDoS)	<0.29.0>=1.0.0 <1.6.3
H Cross-site Request Forgery (CSRF)	>=0.8.1 <0.28.0>=1.0.0 <1.6.0
H Regular Expression Denial of Service (ReDoS)	<0.21.3
M Server-Side Request Forgery (SSRF)	<0.21.1
M Denial of Service (DoS)	<0.18.1

120 VERSIONS IN TOTAL See all versions