vetkit.resilience.http-call-without-timeout.js-axios-call
An axios request is sent without a timeout through the global axios instance, whose default is to wait indefinitely. A slow or unresponsive upstream keeps the request, and whatever is waiting on it, open forever.
Last updated:
Suite: Production readiness
javascript, typescript
An axios request is sent without a timeout through the global axios instance, whose default is to wait indefinitely. A slow or unresponsive upstream keeps the request, and whatever is waiting on it, open forever.
Category: RESILIENCE · Engine rule severity: INFO
How to fix it
Set axios.defaults.timeout once at startup, or create a shared client with axios.create({ timeout: 10_000 }) and use it for these calls; pass timeout (or an AbortSignal.timeout(...) signal) where a single call needs a different limit.
References
Source: packages/engine/rules/resilience/javascript.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.