The vulnerability of the formDataToJSON function in the axios library allows a attacker to cause a service failure.

🗓️ 03 Aug 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The formDataToJSON vulnerability in the axios library can cause uncontrolled resource consumption and service failures.

Reporter	Title	Published	Views	Family All 258
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been found in IBM Security Verify Information Queue	6 Aug 202607:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in axios (CVE-2026-67312, CVE-2026-67313, CVE-2026-67316, CVE-2026-67317, CVE-2026-67319)	25 Sep 202611:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities	6 Aug 202622:32	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in axios	2 Sep 202619:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in axios	16 Sep 202619:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in axios bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.	2 Oct 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in axios affect Content Cortex for Microsoft Office	28 Aug 202616:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM DataPower Interact Gateway 12.1.1.1	2 Sep 202613:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses multiple dependencies which are vulnerable to multiple High Severity CVEs.	29 Sep 202614:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	13 Aug 202607:26	–	ibm

Vulners

Node

npm,axiosRange0.28.0–0.33.0

npm,axiosRange1.0.0–1.18.0

Source	Link
vulncheck	www.vulncheck.com/advisories/axios-before-denial-of-service-via-formtojson
github	www.github.com/axios/axios/security/advisories/GHSA-pmv8-rq9r-6j72
web	www.web.nvd.nist.gov/view/vuln/detail

03 Aug 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25

CVSS 35.3

EPSS0.00521