288 matches found
EUVD-2019-7475
Malware in sbrugna...
EUVD-2015-7143
Malware in sbrugna...
EUVD-2019-3431
Malware in sbrugna...
EUVD-2019-0755
Malware in sbrugna...
EUVD-2009-3000
Malware in sbrugna...
EUVD-2015-3016
Malware in sbrugna...
EUVD-2007-4340
Malware in sbrugna...
EUVD-2007-3804
Malware in sbrugna...
EUVD-2022-3322
Malicious code in bioql PyPI...
EUVD-2022-7470
Malicious code in bioql PyPI...
EUVD-2023-33028
Malicious code in bioql PyPI...
EUVD-2025-9632
Malicious code in bioql PyPI...
Security Bulletin: IBM App Connect Enterprise is vulnerable to Allocation of Resources Without Limits or Throttling due to Node.js module axios (CVE-2025-58754)
Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor and IBM App Connect Enterprise runtime are vulnerable to Allocation of Resources Without Limits or Throttling due to Node.js module axios. Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTT...
Denial Of Service (DoS)
Axios is vulnerable to Denial-of-Service. The vulnerability is due to improper handling of data: scheme URLs, where the Node.js HTTP adapter decodes the entire payload into memory and ignores size limits, allowing attackers to supply a very large data URI to cause unbounded memory allocation and...
CVE-2025-58754
Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the data: scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory...
UBUNTU-CVE-2025-58754
Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the data: scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory...
CVE-2025-58754 Axios is vulnerable to DoS attack through lack of data size check
Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the data: scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory...
CVE-2025-58754 Axios is vulnerable to DoS attack through lack of data size check
Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the data: scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory...
CVE-2025-58754
Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the data: scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory...
Axios is vulnerable to DoS attack through lack of data size check
Summary When Axios runs on Node.js and is given a URL with the data: scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory Buffer/Blob and returns a synthetic 200 response. This path ignores maxContentLength / maxBodyLength which only protect HTTP...