5785 matches found
Security Bulletin: App Connect Professional & IBM WebSphere Cast Iron Solution are affected by axios vulnerability
Summary App Connect Professional & IBM WebSphere Cast Iron Solution have addressed the following vulnerability reported in axios. Vulnerability Details CVEID: CVE-2021-3749 DESCRIPTION: axios is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw in the...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Axios
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Axios. Vulnerability Details CVEID: CVE-2021-3749 DESCRIPTION: axios is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw in the trim function. By sending a...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4 images and security updates
Red Hat Advanced Cluster Management for Kubernetes 2.4.0 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
Security Bulletin: A security vulnerability in Node.js axios module affects IBM Cloud Pak for Multicloud Management Managed Services
Summary A security vulnerability in Node.js axios module affects IBM Cloud Pak for Multicloud Management Managed Services. Vulnerability Details CVEID: CVE-2021-3749 DESCRIPTION: axios is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw in the trim...
Axios Systems Assyst 代码问题漏洞
Axios Systems Assyst is an off-the-shelf application from UK-based Axios Systems for managing IT services without the complexity and overhead associated with ITSM platforms such as ServiceNow and BMC Remedy. Axios Systems Assyst version 10 SP7.5 suffers from a security vulnerability that stems fr...
Regular Expression Denial Of Service (ReDoS)
axios is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in trim in utils.js due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious string as a header...
-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +54377 more potentially affected by CVE-2021-3749 via axios (>=0.1.0, <=0.21.1)
axios NPM version =0.1.0, =1.0.1, =1.0.1, =1.0.0, =1.0.1 - 03-asenkronsdasdsadavehttprequest 1.0.0 - 04-17 1.0.0 - 04-17zy 1.0.0 - 04-a 1.0.0 - 04-code 1.0.0 - 05-clima-mundo 1.0.0 - 0726react 0.1.1 - 0a 1.0.0 - 0c 1.0.0 and more Source cves: CVE-2021-3749 Source advisory: OSV:GHSA-CPH5-M8F7-6C5X...
axios Inefficient Regular Expression Complexity vulnerability
axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity...
GHSA-CPH5-M8F7-6C5X axios Inefficient Regular Expression Complexity vulnerability
axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
A Regular Expression Denial of Service ReDoS vulnerability was found in the nodejs axios. This flaw allows an attacker to provide crafted input to the trim function, which might cause high resources consumption and as a consequence lead to denial of service. The highest threat from this...
DEBIAN-CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
axios is vulnerable to Inefficient Regular Expression Complexity...
UBUNTU-CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749 Inefficient Regular Expression Complexity in axios/axios
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
CVE-2021-3749 affects the Axios package used by IBM Cloud Pak System and Node.js environments. It is a Denial of Service vulnerability via a regular-expression DoS in the trim function, exploitable by crafted input to cause high CPU usage. Remediation is to upgrade to fixed software; IBM Cloud Pa...
