MaxBodyLength Limit Bypass

axios is vulnerable to a maxBodyLength limit bypass. The vulnerability is due to the HTTP/2 request API not enforcing the configured maxBodyLength limit and axios's byte-counting stream wrapper being conditionally applied, which allows an attacker who controls a streamed request body to transmit...