axios and wait-on packages update
-
Thinking about upgrading axios and wait-on packages? I am currently using this plugin and security scanning detected several vulnerabilities related to both packages: For Axios: Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS). An attacker can deplete system resources by providing a manipulated string as input to the format method, causing the regular expression to exhibit a time complexity of?
O(n^2)
. This makes the server to become unable to provide normal service due to the excessive cost and time wasted in processing vulnerable regular expressions.Thanks in advance
- The topic ‘axios and wait-on packages update’ is closed to new replies.