Axios versions prior to 1.15.1 and 0.31.1 have a vulnerability where streamed HTTP request bodies bypass the maxBodyLength limit when maxRedirects is set to 0. This allows oversized streamed uploads to be sent fully despite configured body size limits, potentially leading to denial of service or resource exhaustion in Node.js services using Axios for streamed uploads.