• Thinking about upgrading axios and wait-on packages? I am currently using this plugin and security scanning detected several vulnerabilities related to both packages: For Axios: Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS). An attacker can deplete system resources by providing a manipulated string as input to the format method, causing the regular expression to exhibit a time complexity of?O(n^2). This makes the server to become unable to provide normal service due to the excessive cost and time wasted in processing vulnerable regular expressions.

    Thanks in advance

  • The topic ‘axios and wait-on packages update’ is closed to new replies.