ITADN

upgrade Axios: version <1.12.0 is vulnerable to DoS attack

#115Closedrsodre 创建于 2025-10-01
R
rsodrecommented
### Describe the bug I have dependabot alerts on all my Vite front-end projects because of this issue. > Axios is vulnerable to DoS attack through lack of data size check > Upgrade axios to version 1.12.0 or later. For example: ``` "dependencies": { "axios": ">=1.12.0" } ``` Reference: [GHSA-4hjh-wcwx-xvwj](https://github.com/advisories/GHSA-4hjh-wcwx-xvwj): ### Reproduction I don't know how to trigger dependabot alert. ### System Info N/A ### Logs <img width="1006" height="942" alt="Image" src="https://github.com/user-attachments/assets/8218fbcd-bb8b-4b96-95fe-ef8cc848f1f0" />
关闭于 2025-10-07 1 条评论