axios@0.21.4 vulnerabilities
Promise based HTTP client for the browser and node.js
-
latest version
1.7.7
-
latest non vulnerable version
-
first published
10 years ago
-
latest version published
16 days ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the axios package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS). An attacker can deplete system resources by providing a manipulated string as input to the format method, causing the regular expression to exhibit a time complexity of How to fix Regular Expression Denial of Service (ReDoS)? Upgrade |
<1.6.3
|
axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF) due to inserting the How to fix Cross-site Request Forgery (CSRF)? Upgrade |
>=0.8.1 <0.28.0
>=1.0.0 <1.6.0
|