axios vulnerabilities

Promise based HTTP client for the browser and node.js

1.13.0

11 years ago

9 hours ago

Known vulnerabilities in the axios package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling	<1.12.0
M Server-side Request Forgery (SSRF)	<0.30.0>=1.0.0 <1.8.3
M Server-side Request Forgery (SSRF)	<0.30.0>=1.0.0 <1.8.2
H Server-side Request Forgery (SSRF)	>=1.3.2 <1.7.4
H Prototype Pollution	>=0.28.0 <0.29.0>=1.0.0 <1.6.4
M Regular Expression Denial of Service (ReDoS)	<0.29.0>=1.0.0 <1.6.3
H Cross-site Request Forgery (CSRF)	>=0.8.1 <0.28.0>=1.0.0 <1.6.0
H Regular Expression Denial of Service (ReDoS)	<0.21.3
M Server-Side Request Forgery (SSRF)	<0.21.1
M Denial of Service (DoS)	<0.18.1

122 VERSIONS IN TOTAL See all versions