Axios versions prior to 1.15.1 and 0.31.1 have a vulnerability where the maxContentLength limit is bypassed when using responseType 'stream'. This allows applications to consume arbitrarily large streamed HTTP responses, potentially leading to denial of service due to unbounded resource consumption.