CVE-2021-3749 Details
Description
axios is vulnerable to Inefficient Regular Expression Complexity
A denial-of-service vulnerability has been identified in the Axios library, specifically in versions prior to 0.21.4. This vulnerability arises from an inefficient regular expression that can be exploited to create a regular expression denial-of-service (ReDoS) condition. An attacker can craft input that, when processed by the vulnerable regular expression, causes excessive CPU usage, leading to application slowdowns or crashes.
Users are advised to update Axios to version 0.21.4 or later.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1333 | Inefficient Regular Expression Complexity | [email protected] |
| CWE-400 | Uncontrolled Resource Consumption | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| axios axios | <= 0.21.1 |
CPE
Remediation
| |
| siemens sinec ins | < 1.0 1.0 - 1.0 sp1 |
CPE
Remediation
| |
| oracle goldengate | >= 21.1, < 21.7.0.0.0 |
CPE
Remediation
| |
Change History
18 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Nov 7, 2023 | CVE Modified | [email protected] |
| Oct 7, 2022 | Reanalysis | [email protected] |
| Oct 6, 2022 | Modified Analysis | [email protected] |
| Sep 13, 2022 | CVE Modified | [email protected] |
| Jul 25, 2022 | CVE Modified | [email protected] |
| May 12, 2022 | CVE Modified | [email protected] |
| May 3, 2022 | CWE Remap | [email protected] |
| Apr 1, 2022 | Modified Analysis | [email protected] |
| Oct 10, 2021 | CVE Modified | [email protected] |
| Oct 9, 2021 | CVE Modified | [email protected] |
| Oct 9, 2021 | CVE Modified | [email protected] |
| Oct 9, 2021 | CVE Modified | [email protected] |
| Oct 9, 2021 | CVE Modified | [email protected] |
| Oct 8, 2021 | CVE Modified | [email protected] |
| Sep 8, 2021 | Initial Analysis | [email protected] |