Lucene search
+L

1 matches found

OSV
OSV
•added 2026/07/20 10:37 p.m.•43 views

GHSA-MWF2-3PR3-8698 Axios: HTTP/2 streamed uploads bypass `maxBodyLength`

Summary Axios versions with Node.js HTTP/2 support allow streamed request bodies to bypass maxBodyLength enforcement when requests are sent with httpVersion: 2. This affects applications that rely on maxBodyLength as a hard cap while forwarding attacker-controlled streams, such as upload endpoint...

6.3CVSS5.3AI score0.00616EPSS
SaveExploits1References7
Rows per page
Query Builder