p PatchFirst

CVE-2019-10742

CVE-2019-10742

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.

CVSS 7.5 · High · EPSS 6.1% · Fix available

Published
Updated

Stack: system · node

Affected products and versions

  • axios

    Versions
    • through 0.18.0: Affected

    No fix published

  • node-axios Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.17.1+dfsg-2

    Update to 0.17.1+dfsg-2

  • node-axios Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.17.1+dfsg-2

    Update to 0.17.1+dfsg-2

  • node-axios Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.17.1+dfsg-2

    Update to 0.17.1+dfsg-2

  • axios npm

    Affected ranges
    • SEMVER: < 0.18.1

    Update to 0.18.1

Original sources

Check your server →