Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

axios

npm

Promise based HTTP client for the browser and node.js

View on github.com · View on npmjs.org

Security Advisories for axios in npm

High
about 1 month ago

Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning GSA_kwCzR0hTQS1nY2ZqLTY0dnctNm1wOc4ABcRL

npm axios
Moderate
about 1 month ago

Axios form serializer maxDepth bypass via {} metatoken GSA_kwCzR0hTQS1oY3B4LTZmbTYtd3gyM84ABcRK

npm axios
Moderate
about 1 month ago

Axios: Nested axios option objects can consume polluted prototype values GSA_kwCzR0hTQS03cThxLXJqNmotbWhqcc4ABcRJ

npm axios
Moderate
about 1 month ago

Axios: HTTP/2 streamed uploads bypass `maxBodyLength` GSA_kwCzR0hTQS1td2YyLTNwcjMtODY5OM4ABcRI

npm axios
Moderate
about 1 month ago

Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength` GSA_kwCzR0hTQS1qcWg0LW05dzMtOGhwOc4ABcRH

npm axios
Moderate
about 1 month ago

Axios: Prototype pollution gadgets can alter axios request construction GSA_kwCzR0hTQS1tbXg3LWhmeGYtanBweM4ABcRG

npm axios
Moderate
about 1 month ago

Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios GSA_kwCzR0hTQS1mNGd3LTJwN3YtNDU0OM4ABcRF

npm axios
Moderate
about 1 month ago

Axios: Excessive recursion in formDataToJSON can cause denial of service GSA_kwCzR0hTQS00Mmg5LTgyNnctY2d2M84ABcPQ

npm axios
Moderate
about 1 month ago

Axios: Prototype pollution auth subfields can inject Basic auth GSA_kwCzR0hTQS14ajZxLTh4ODMtanY2Z84ABcPP

npm axios
Moderate
about 1 month ago

Axios: Deep formToJSON Key Recursion Can Cause Denial of Service GSA_kwCzR0hTQS1wbXY4LXJxOXItNmo3Ms4ABcPO

npm axios
High
3 months ago

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection GSA_kwCzR0hTQS1oZnh2LTI0cmcteHJxZs4ABYCo

npm axios
High
3 months ago

Allocation of Resources Without Limits or Throttling in Axios GSA_kwCzR0hTQS03NzdjLTdmanItNTR2Zs4ABYCn

npm axios
High
3 months ago

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter GSA_kwCzR0hTQS1wOTJxLTl2cXItNGo4ds4ABYCm

npm axios
High
3 months ago

Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection GSA_kwCzR0hTQS1qNWY4LWdybTktcDlmY84ABYCl

npm axios
High
3 months ago

axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge GSA_kwCzR0hTQS0zZzQzLTZnbWctNjZqd84ABXuw

npm axios
High
3 months ago

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy` GSA_kwCzR0hTQS0zNWpwLXd3NjUtOTV3aM4ABXuv

npm axios
High
3 months ago

axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718) GSA_kwCzR0hTQS1wandtLXBqM3AtNDNtds4ABXuu

npm axios
Moderate
3 months ago

axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions GSA_kwCzR0hTQS04OThjLXEyY3IteHdoZ84ABXut

npm axios
Low
3 months ago

Axios has a Patch Bypass: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix GSA_kwCzR0hTQS02NTRtLWM4cDQteDVmcM4ABXus

npm axios
Moderate
4 months ago

Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream GSA_kwCzR0hTQS00NDVxLXZyNXctNnE3N84ABWJ9

npm axios
Moderate
4 months ago

Axios: no_proxy bypass via IP alias allows SSRF GSA_kwCzR0hTQS1tN3ByLWhqcWgtOTJjbc4ABWJ8

npm axios
Moderate
4 months ago

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data GSA_kwCzR0hTQS02MmhmLTU3eHctMjhqOc4ABWJ7

npm axios
Moderate
4 months ago

Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0 GSA_kwCzR0hTQS01Yzl4LThnY20tbXBneM4ABWJ6

npm axios
Moderate
4 months ago

Axios: HTTP adapter streamed responses bypass maxContentLength GSA_kwCzR0hTQS12ZjJtLTQ2OHAtOHY5Oc4ABWJw

npm axios
High
4 months ago

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking GSA_kwCzR0hTQS1wZjg2LTV4NjItanJ3Zs4ABWJv

npm axios
High
4 months ago

Axios: Header Injection via Prototype Pollution GSA_kwCzR0hTQS02Y2hxLXdmcjMtMmhqOc4ABWJu

npm axios
Moderate
4 months ago

Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion GSA_kwCzR0hTQS14eDZ2LXJwNngtcTM5Y84ABWJt

npm axios
Moderate
4 months ago

Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy GSA_kwCzR0hTQS13OWoyLXB2Z2gtNmg2M84ABWJs

npm axios
High
4 months ago

Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0 GSA_kwCzR0hTQS1wbXdnLWN2aHItOHZoN84ABWJr

npm axios
Moderate
4 months ago

Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver` GSA_kwCzR0hTQS0zdzZ4LTJnN20tOHYyM84ABWJq

npm axios
High
4 months ago

Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking GSA_kwCzR0hTQS1xOHFwLWN2Y3cteDZqas4ABWJp

npm axios
Low
4 months ago

Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams GSA_kwCzR0hTQS14aGpoLXBtY3YtMjNqd84ABWJo

npm axios
Moderate
5 months ago

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain GSA_kwCzR0hTQS1mdmN2LTNtMjYtcGNxeM4ABVGD

npm axios
Moderate
5 months ago

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF GSA_kwCzR0hTQS0zcDY4LXJjNHctcWd4Nc4ABVAs

npm axios
Moderate
5 months ago

Axios HTTP/2 Session Cleanup State Corruption Vulnerability GSA_kwCzR0hTQS1xajgzLWNxNDctdzVmOM4ABU8S

npm axios
High
7 months ago

Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig GSA_kwCzR0hTQS00M2ZjLWpmODYtajQzM84ABSHW

npm axios
High
12 months ago

Axios is vulnerable to DoS attack through lack of data size check GSA_kwCzR0hTQS00aGpoLXdjd3gteHZ3as4ABMAO

npm axios
High
over 1 year ago

axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL GSA_kwCzR0hTQS1qcjVmLXYyanYtNjl4Ns4ABFM2

npm axios
High
about 2 years ago

Server-Side Request Forgery in axios GSA_kwCzR0hTQS04aGM0LXZoNjQtY3htas4AA-hD

npm axios
Moderate
almost 3 years ago

Axios Cross-Site Request Forgery Vulnerability GSA_kwCzR0hTQS13ZjVwLWc2dnctcmh4eM4AA2_y

npm axios
High
almost 5 years ago

axios Inefficient Regular Expression Complexity vulnerability GSA_kwCzR0hTQS1jcGg1LW04ZjctNmM1eM0VhQ

npm axios
Moderate
over 5 years ago

Axios vulnerable to Server-Side Request Forgery MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3MnYtcTIzNS12cDk5

npm axios
High
about 7 years ago

Denial of Service in axios MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQyeHctMnh2Yy1xeDht

npm axios

Filter by Severity

Moderate 23 High 18 Low 2