{"id":"CVE-2021-3749","aliases":["CLSA-2026-1774225186","CLSA-2026-1776991067","CLSA-2026-1782521951","CLSA-2026-1782781178","DEBIAN-CVE-2021-3749","EUVD-2021-2040","GHSA-cph5-m8f7-6c5x","RHSA-2022:1276","ROOT-APP-NPM-CVE-2021-3749","UBUNTU-CVE-2021-3749"],"status":"published","title":"Inefficient Regular Expression Complexity in axios/axios","description":"axios is vulnerable to Inefficient Regular Expression Complexity","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.08515,"percentile":0.95088,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-1333","CWE-400"],"published":"2021-08-31T10:36:43Z","modified":"2026-10-24T10:50:08Z","exploits":[{"source":"pocgithub","id":"T-Guerrero/axios-redos","title":"T-Guerrero/axios-redos","date":"2022-06-12","url":"https://github.com/T-Guerrero/axios-redos"}],"fixes":[{"ecosystem":"npm","package":"axios","fixed_in":["0.21.2"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"node-axios","fixed_in":["0.21.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"node-axios","fixed_in":["0.21.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"node-axios","fixed_in":["0.21.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/axios","fixed_in":["0.21.1-root.io.3","0.21.1-root.io.4","0.21.1-root.io.5"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"axios","fixed_in":["0.21.1-aikido.3","0.21.1-aikido.4","0.21.1-aikido.5"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.2"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.18.1-tuxcare.0"},{"fixed":"0.18.1-tuxcare.1"}]}],"versions":["0.18.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:npm","package":"axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.15.3-tuxcare.0"},{"fixed":"0.15.3-tuxcare.1"}]}],"versions":["0.15.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:npm","package":"axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.19.2-tuxcare.0"},{"fixed":"0.19.2-tuxcare.1"}]}],"versions":["0.19.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:npm","package":"axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.21.1-tuxcare.0"},{"fixed":"0.21.1-tuxcare.1"}]}],"versions":["0.21.1"],"bundled":16},{"source":"osv","ecosystem":"Debian:12","package":"node-axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"node-axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"node-axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"npm","package":"axios","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.21.2"}]}]},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-istioctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-mixc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-mixs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-pilot-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-pilot-discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"kiali","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:v1.24.7.redhat1-1.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-16.el8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-root.io.3"},{"fixed":"0.21.1-root.io.4"},{"fixed":"0.21.1-root.io.5"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-aikido.3"},{"fixed":"0.21.1-aikido.4"},{"fixed":"0.21.1-aikido.5"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"node-axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.19.0+dfsg-2","0.19.0+dfsg-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"node-axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.21.1+dfsg-1","0.23.0+dfsg-2","0.24.0+dfsg-1","0.25.0+dfsg-2","0.26.0+dfsg-1","0.26.0+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"node-axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.1+dfsg-1","1.5.1+dfsg-1","1.6.2+dfsg-1","1.6.8+dfsg-2","1.6.8+dfsg-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"node-axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.9+dfsg-1","1.8.4+dfsg-1","1.11.0+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"node-axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.2+dfsg-1build1","1.16.0-1","1.18.0-1","1.19.0-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"node-axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11.0+dfsg-1","1.12.1+dfsg-1","1.13.2+dfsg-1build1","1.13.2+dfsg-1ubuntu0.1~esm1"]}],"products":[{"vendor":"axios","product":"axios"},{"vendor":"axios","product":"axios/axios"},{"vendor":"oracle","product":"goldengate"},{"vendor":"siemens","product":"sinec_ins"}],"references":[{"url":"https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","Third Party Advisory","fix","web","article","report"]},{"url":"https://github.com/axios/axios/commit/5b457116e31db0e88fede6c428e969e87f290929","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","article","report"]},{"url":"https://lists.apache.org/thread.html/r7324ecc35b8027a51cb6ed629490fcd3b2d7cf01c424746ed5744bf1%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rfc5c478053ff808671aef170f3d9fc9d05cc1fab8fb64431edc66103%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r216f0fd0a3833856d6a6a1fada488cadba45f447d87010024328ccf2%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r3ae6d2654f92c5851bdb73b35e96b0e4e3da39f28ac7a1b15ae3aab8%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/ra15d63c54dc6474b29f72ae4324bcb03038758545b3ab800845de7a1%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r74d0b359408fff31f87445261f0ee13bdfcac7d66f6b8e846face321%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rc263bfc5b53afcb7e849605478d73f5556eb0c00d1f912084e407289%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r4bf1b32983f50be00f9752214c1b53738b621be1c2b0dbd68c7f2391%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r075d464dce95cd13c03ff9384658edcccd5ab2983b82bfc72b62bb10%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rfa094029c959da0f7c8cd7dc9c4e59d21b03457bf0cedf6c93e1bb0a%40%3Cdev.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3749","tags":["advisory"]},{"url":"https://www.npmjs.com/package/axios","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r075d464dce95cd13c03ff9384658edcccd5ab2983b82bfc72b62bb10@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r216f0fd0a3833856d6a6a1fada488cadba45f447d87010024328ccf2@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3ae6d2654f92c5851bdb73b35e96b0e4e3da39f28ac7a1b15ae3aab8@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4bf1b32983f50be00f9752214c1b53738b621be1c2b0dbd68c7f2391@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r7324ecc35b8027a51cb6ed629490fcd3b2d7cf01c424746ed5744bf1@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r74d0b359408fff31f87445261f0ee13bdfcac7d66f6b8e846face321@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ra15d63c54dc6474b29f72ae4324bcb03038758545b3ab800845de7a1@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc263bfc5b53afcb7e849605478d73f5556eb0c00d1f912084e407289@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rfa094029c959da0f7c8cd7dc9c4e59d21b03457bf0cedf6c93e1bb0a@%3Cdev.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rfc5c478053ff808671aef170f3d9fc9d05cc1fab8fb64431edc66103@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://github.com/advisories/GHSA-cph5-m8f7-6c5x"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3749","tags":["advisory"]},{"url":"https://github.com/axios/axios","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1276","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1999784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061638","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1276.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28851","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28851","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28851","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28852","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28852","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3749","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29482","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29482","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29482","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29923","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29923","tags":["advisory"]},{"url":"https://sick.codes/sick-2021-016/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-36221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-36221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36221","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/uHACNfXAZqk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43565","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43565","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43824","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-vj5m-rch8-5r2p","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43825","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43825","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-h69p-g6xg-mhhh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43826","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43826","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-cmx3-fvgf-83mf","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21654","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-5j4x-g36v-m283","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21655","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21655","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-7r5p-7fmh-jxpg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23606","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-9vp2-4cp7-vvxf","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23635","tags":["advisory"]},{"url":"https://istio.io/latest/news/security/istio-security-2022-003","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24726","tags":["advisory"]},{"url":"https://istio.io/latest/news/security/istio-security-2022-004/","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2021-3749","tags":["report"]},{"url":"https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31/","tags":["report"]},{"url":"https://github.com/axios/axios/pull/3980","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-3749","title":"Inefficient Regular Expression Complexity in axios/axios","description":"axios is vulnerable to Inefficient Regular Expression Complexity","status":"published","published":"2021-08-31T10:36:43Z","modified":"2024-08-03T17:09:08.302Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-1333"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-2040","description":"axios is vulnerable to Inefficient Regular Expression Complexity","status":"published","published":"2021-08-31T10:36:43Z","modified":"2024-08-03T17:09:08Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T03:25:11.953192Z"}],"ghsa":[{"id":"GHSA-cph5-m8f7-6c5x","title":"axios Inefficient Regular Expression Complexity vulnerability","description":"axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity.","status":"published","published":"2021-09-01T18:23:02Z","modified":"2025-02-12T05:10:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-1333"],"updated_at":"2026-11-02T14:38:30.754382Z"}],"nvd":[{"id":"CVE-2021-3749","description":"axios is vulnerable to Inefficient Regular Expression Complexity","status":"published","published":"2021-08-31T11:15:07.89Z","modified":"2026-06-17T04:05:41.55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-1333","CWE-400"],"updated_at":"2026-11-02T14:06:57.67549Z"}],"osv":[{"id":"CVE-2021-3749","description":"axios is vulnerable to Inefficient Regular Expression Complexity","status":"published","published":"2021-08-31T11:15:07.89Z","modified":"2026-10-24T10:50:08.119172112Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:20.434873Z"},{"id":"DEBIAN-CVE-2021-3749","description":"axios is vulnerable to Inefficient Regular Expression Complexity","status":"published","published":"2021-08-31T11:15:07.89Z","modified":"2026-10-23T18:03:49.82260826Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"GHSA-cph5-m8f7-6c5x","title":"axios Inefficient Regular Expression Complexity vulnerability","description":"axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity.","status":"published","published":"2021-09-01T18:23:02Z","modified":"2026-09-10T03:49:08.788547249Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-1333","CWE-400"],"updated_at":"2026-11-02T15:46:45.28161Z"},{"id":"RHSA-2022:1276","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.9 security update","status":"published","published":"2024-09-30T14:20:27Z","modified":"2026-10-17T10:01:26Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"UBUNTU-CVE-2021-3749","description":"axios is vulnerable to Inefficient Regular Expression Complexity","status":"published","published":"2021-08-31T11:15:00Z","modified":"2026-10-17T12:56:20.64146473Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"CLSA-2026-1774225186","title":"TuxCare security update for axios (5 CVEs)","description":"TuxCare rebuilt axios to address 5 CVEs. Fixed in 0.18.1-tuxcare.1.","status":"published","published":"2026-08-04T14:52:14Z","modified":"2026-10-15T09:47:02.160008442Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1776991067","title":"TuxCare security update for axios (6 CVEs)","description":"TuxCare rebuilt axios to address 6 CVEs. Fixed in 0.15.3-tuxcare.1.","status":"published","published":"2026-08-04T14:52:28Z","modified":"2026-10-15T13:57:54.838790817Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1782521951","title":"TuxCare security update for axios (17 CVEs)","description":"TuxCare rebuilt axios to address 17 CVEs. Fixed in 0.19.2-tuxcare.1.","status":"published","published":"2026-08-04T14:52:39Z","modified":"2026-10-15T09:47:51.501643897Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782781178","title":"TuxCare security update for axios (16 CVEs)","description":"TuxCare rebuilt axios to address 16 CVEs. Fixed in 0.21.1-tuxcare.1.","status":"published","published":"2026-08-04T14:52:40Z","modified":"2026-10-15T13:57:56.893232091Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"ROOT-APP-NPM-CVE-2021-3749","title":"CVE-2021-3749 in @rootio/axios - Patched by Root","description":"Root has patched CVE-2021-3749 in the @rootio/axios package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-07-22T11:44:07Z","modified":"2026-07-22T14:00:04.460888602Z","updated_at":"2026-11-02T15:53:27.362922Z"}]}}