Tag: nodejs

1 post

• Reporting a ReDoS to axios: The Mutant That Talked Me Out of the Right Answer28 September 2026 · 8 min readI reported a quadratic-backtracking ReDoS in axios's proxy-bypass helper, and the fix shipped in a release three weeks before the advisory said the bug existed. Then I ran a measurement that overruled a conclusion I had got right.