Skip to content

Upgrading axios 0.29 to 0.30

Safe0.29.0 → 0.30.3Security5Fixed5Other2

Full comparisonBack to axios
SafeUpgrade verdict

3 security fixes. Nothing to change in your code.

In plain terms
  • Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
  • Axios is vulnerable to DoS attack through lack of data size check
  • axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL
Must act 3 items need code or config changes

What you must change

Security3
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
High · CVSS 7.5
0.30.3GitHub AdvisoryOriginalView source
Axios is vulnerable to DoS attack through lack of data size check
maxContentLengthHigh · CVSS 7.5
0.30.2GitHub AdvisoryOriginalView source
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL
High
0.30.0GitHub AdvisoryOriginalView source

API changes

Generated by DepDelta from published .d.ts files. Not mixed with prose notes.

  • added: property AxiosRequestConfig.allowAbsoluteUrls?: boolean