Packages / axios / Security

HighVulnerabilityGHSA-cph5-m8f7-6c5xCVE-2021-3749Published 1 Sep 2021

axios Inefficient Regular Expression Complexity vulnerability

Affected releases · axios

  • 0.21.x0.21.0 – 0.21.1Fixed in 0.21.2
  • 0.20.x and older0.1.0 – 0.20.0No fix, no longer updated

On 0.21.x, the newest line:

npm install axios@0.21.2
1.x

  1. Not affected

    1.0.0 – 1.20.0

    71 releases, latest

0.x

  1. Affected

    0.1.0 – 0.21.1

    44 releases

  2. Fixed

    0.21.2 – 0.34.0

    25 releases

140 stable releases of axios, oldest to newest, one row per major.

Is your project affected?

Paste your package.json, or type the range you declare for axios. It is read in your browser and sent nowhere.

What happens

axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity.