CVE-2019-10742

Questo repository non contiene un README...

CVE-2019-10742

creationtimestamp| type| source ---|---|--- 2023-12-10 18:34:54+00:00| seen| https://t.me/arpsyndicate/1674...

Using vulnerable dependencies in package.json

Description 1. Hello team, The Showdoc is using a axios 0.17.1 dependency that is vulnerable to:👇 1. CVE-2021-3749 Regular Expression Denial of Service ReDoS 2. CVE-2020-28168 Server-Side Request Forgery SSRF 3. CVE-2019-10742 Denial of Service DoS Path to the file:...

10chars-test (>=1.0.0, <=1.0.34), 12366.ui-comp (0.0.1) +9595 more potentially affected by CVE-2019-10742 via axios (>=0.1.0, <=0.18.0)

axios NPM version =0.1.0, =1.0.0, =1.0.0, =1.2.0, =1.0.0, =0.3.11, =0.3.3, =0.3.0, =1.0.0-beta.7, =0.1.0, =0.2.1 and more Source cves: CVE-2019-10742 Source advisory: OSV:GHSA-42XW-2XVC-QX8M...

CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

CVE-2019-10742

Axios versions prior to 0.18.1 are vulnerable to a Denial of Service due to continuing to accept content after maxContentLength is exceeded, potentially causing server/application resource exhaustion. Public advisories reference DoS in Axios up to 0.18.0 and recommend upgrading to 0.18.1 or later...

10chars-test (>=1.0.0, <=1.0.34), 12366.ui-comp (0.0.1) +9595 more potentially affected by CVE-2019-10742 via axios (>=0.1.0, <=0.18.0)

axios NPM version =0.1.0, =1.0.0, =1.0.0, =1.2.0, =1.0.0, =0.3.11, =0.3.3, =0.3.0, =1.0.0-beta.7, =0.1.0, =0.2.1 and more Source cves: CVE-2019-10742 Source advisory: SNYK:JS-AXIOS-174505...