UnratedFix available
axios v1.16.0
axios v1.16.0 enforces body-size limits in the fetch adapter, which were previously ignored and could leave users without protection against denial-of-service or accidental large uploads.
Announced Source revision 1
Original source ↗github-axios-axios
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Fetch adapter now enforces maxBodyLength and maxContentLength. These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection.
axios
Release notes from axios
- Affected versions
- prior to 1.16.0
These limits were silently ignored on the fetch adapter prior to 1.16.0
- Fixed versions
- 1.16.0
v1.16.0 — May 2, 2026
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #79350 · Revision 1
- Added to Heist Feed
- Publisher date