upgrade Axios: version <1.12.0 is vulnerable to DoS attack
### Describe the bug
I have dependabot alerts on all my Vite front-end projects because of this issue.
> Axios is vulnerable to DoS attack through lack of data size check
> Upgrade axios to version 1.12.0 or later. For example:
```
"dependencies": {
"axios": ">=1.12.0"
}
```
Reference: [GHSA-4hjh-wcwx-xvwj](https://github.com/advisories/GHSA-4hjh-wcwx-xvwj):
### Reproduction
I don't know how to trigger dependabot alert.
### System Info
N/A
### Logs
<img width="1006" height="942" alt="Image" src="https://github.com/user-attachments/assets/8218fbcd-bb8b-4b96-95fe-ef8cc848f1f0" />
关闭于 2025-10-07 1 条评论