Vulnerability

CVE-2021-3749

 Report advisory or correction

CVSS Score 7.5 high

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-1333

References

https://github.com/axios/axios/pull/3980
https://github.com/advisories/GHSA-cph5-m8f7-6c5x
https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31/
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-3749

[CVE-2021-3749] CWE-1333 CWE-400

Description

axios is vulnerable to Inefficient Regular Expression Complexity

See axios package information