Description
Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.
Remediation
References
https://app.snyk.io/vuln/SNYK-JS-AXIOS-174505
https://github.com/axios/axios/issues/1098
https://github.com/axios/axios/pull/1485
Related Vulnerabilities
CVE-2022-28150 Vulnerability in maven package com.synopsys.jenkinsci:ownership
CVE-2022-31069 Vulnerability in npm package @ffdc/nestjs-proxy
CVE-2021-37306 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base
CVE-2023-29003 Vulnerability in npm package @sveltejs/kit
CVE-2021-25931 Vulnerability in maven package org.opennms:opennms-webapp