CVE-2026-101903 - Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)
CVE ID :CVE-2026-101903 Published : Sept. 28, 2026, 6:17 p.m. | 1 hour, 58 minutes ago Description :Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular expression allows slash characters on both sides of the media-type separator. An...