Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/20 10:37 p.m.28 views

GHSA-MWF2-3PR3-8698 Axios: HTTP/2 streamed uploads bypass `maxBodyLength`

Summary Axios versions with Node.js HTTP/2 support allow streamed request bodies to bypass maxBodyLength enforcement when requests are sent with httpVersion: 2. This affects applications that rely on maxBodyLength as a hard cap while forwarding attacker-controlled streams, such as upload endpoint...

6.3CVSS5.3AI score0.00356EPSS
SaveExploits0References5
Rows per page
Query Builder