CVE-2019-10742
Fixed in a distro release EPSS 6%
Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.
Products: axios
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | axios | 0.18.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | node-axios | 0.17.1+dfsg-2 |
| Debian 13 | node-axios | 0.17.1+dfsg-2 |
| Debian 14 | node-axios | 0.17.1+dfsg-2 |
| Ubuntu 20.04 LTS | node-axios | 0.19.0+dfsg-2 |