CVE-2021-3749GHSA-CPH5-M8F7-6C5X
Inefficient Regular Expression Complexity in axios/axios
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 0.21.2
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 proof of concept on GitHub
Summary
axios is vulnerable to Inefficient Regular Expression Complexity
Timeline
- CVE published
- Record last updated
Affected versions
- axios axios/axios
through 0.21.1
- axiosnpm
fixed in 0.21.2
References 15
GitHub · axios/axios
lists.apache.org
- thread.html/r7324ecc35b8027a51cb6ed629490fcd3b2d7cf01c424746ed5744bf1@<commits.druid.apache.org>
- thread.html/rfc5c478053ff808671aef170f3d9fc9d05cc1fab8fb64431edc66103@<commits.druid.apache.org>
- thread.html/r216f0fd0a3833856d6a6a1fada488cadba45f447d87010024328ccf2@<commits.druid.apache.org>
- thread.html/r3ae6d2654f92c5851bdb73b35e96b0e4e3da39f28ac7a1b15ae3aab8@<commits.druid.apache.org>
- thread.html/ra15d63c54dc6474b29f72ae4324bcb03038758545b3ab800845de7a1@<commits.druid.apache.org>
- thread.html/r74d0b359408fff31f87445261f0ee13bdfcac7d66f6b8e846face321@<commits.druid.apache.org>
- thread.html/rc263bfc5b53afcb7e849605478d73f5556eb0c00d1f912084e407289@<commits.druid.apache.org>
- thread.html/r4bf1b32983f50be00f9752214c1b53738b621be1c2b0dbd68c7f2391@<commits.druid.apache.org>
- thread.html/r075d464dce95cd13c03ff9384658edcccd5ab2983b82bfc72b62bb10@<commits.druid.apache.org>
- thread.html/rfa094029c959da0f7c8cd7dc9c4e59d21b03457bf0cedf6c93e1bb0a@<dev.druid.apache.org>