GitHub Advisoryadvisory · npm

GHSA-cph5-m8f7-6c5x axios Inefficient Regular Expression Complexity vulnerability

HIGH Published 2021-09-01 Modified 2022-09-14 Official page ↗
Aliases
CVE-2021-3749
Ecosystem
npm
Packages
axios
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-1333, CWE-400
Reviewed
2021-09-01

Affected packages

• npm axios: < 0.21.2 → fixed in 0.21.2

Description

axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity.

Related

Alias · CVE (1)

  • CVE-2021-3749 axios is vulnerable to Inefficient Regular Expression Complexity vulnerability

Weakness · CWE (2)

  • CWE-1333 Inefficient Regular Expression Complexity weakness
  • CWE-400 Uncontrolled Resource Consumption weakness

References