axios Inefficient Regular Expression Complexity vulnerability

axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3749

A Regular Expression Denial of Service ReDoS vulnerability was found in the nodejs axios. This flaw allows an attacker to provide crafted input to the trim function, which might cause high resources consumption and as a consequence lead to denial of service. The highest threat from this...

CVE-2021-3749

axios is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3749

axios is vulnerable to Inefficient Regular Expression Complexity...

DEBIAN-CVE-2021-3749

axios is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3749

axios is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3749

axios is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

axios is vulnerable to Inefficient Regular Expression Complexity...

UBUNTU-CVE-2021-3749

axios is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3749

CVE-2021-3749 affects the Axios package used by IBM Cloud Pak System and Node.js environments. It is a Denial of Service vulnerability via a regular-expression DoS in the trim function, exploitable by crafted input to cause high CPU usage. Remediation is to upgrade to fixed software; IBM Cloud Pa...

CVE-2021-3749 Inefficient Regular Expression Complexity in axios/axios

axios is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3749

axios is vulnerable to Inefficient Regular Expression Complexity...

PT-2021-21692 · Axios · Axios

Name of the Vulnerable Software and Affected Versions: axios versions prior to 0.21.2 Description: The issue is related to Inefficient Regular Expression Complexity. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

Axios 资源管理错误漏洞

Axios is an HTTP client based on Promise a solution for asynchronous programming. Axios has a security vulnerability that stems from a ReDoS Regular Expression Denial of Service flaw found in the axios package. An attacker could exploit the vulnerability to cause the application to consume...

Inefficient Regular Expression Complexity in axios/axios

✍️ Description A ReDoS regular expression denial of service flaw was found in the axios package. An attacker that is able to provide crafted input to the trim function may cause an application to consume an excessive amount of CPU. Similar attack ref: https://nvd.nist.gov/vuln/detail/CVE-2020-7753...

The vulnerability of the Axios application software Aurora Center, which allows a perpetrator to carry out an SSRF attack

The vulnerability of the Axios application software Autora Center relates to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to a Server-Side Request Forgery vulnerability (CVE-2020-28168)

Summary If an App Connect flow calls a URL controlled by a malicious actor, and App Connect Enterprise is running in an environment with a proxy, the controller of the target URL can construct a response with a redirect that results in the proxy being bypassed Vulnerability Details CVEID:...

Server-Side Request Forgery

Overview The axios NPM package before 0.21.1 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address. Recommendation Upgrade to 0.21.1 or later. References - Github...

-lidonghui (=1.0.0), -tompan-reacttemplate (>=1.0.1 <=1.1.0) +51398 more potentially affected by CVE-2020-28168 via axios (>=0.10.0 <=0.21.0)

axios NPM version =0.10.0, =1.0.1, =1.0.1, =1.0.0, =1.0.1 - 03-asenkronsdasdsadavehttprequest =1.0.0 - 04-17 =1.0.0 - 04-17zy =1.0.0 - 04-a =1.0.0 - 04-code =1.0.0 - 05-clima-mundo =1.0.0 - 0726react =0.1.1 - 0a =1.0.0 - 0c =1.0.0 and more Source cves: CVE-2020-28168 Source advisory:...

Axios vulnerable to Server-Side Request Forgery

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...