CVE-2023-45857-Demo

Demo para verificar el comportamiento de la vulnerabilidad CVE-2023-45857 de axios 1. Iniciar en el dev container 2. Ejecutar npm run dev en el contenedor app 3. Acceder a http://app.localhost 4. Comprobar en las herramientas de desarrollo del navegador que la cookie XSRF-TOKEN se ha establecido...

axios-redos

Ataque de Denegación de Servicio por Expresión Regular en Axios Este repositorio contiene un POC de CVE-2021-3749. Resumen Se encontró una falla de ReDoS denegación de servicio por expresión regular en el paquete axios. Un atacante que pueda proporcionar una entrada manipulada a la función trim...

axios-CVE-2025-27152-PoC

Este repositorio no tiene un README...

CVE-2023-45857-Demo

Demostración para verificar el comportamiento de la vulnerabilidad CVE-2023-45857 de axios 1. Iniciar con dev container 2. Ejecutar npm run dev en el contenedor app 3. Acceder a http://app.localhost 4. Verificar que la Cookie XSRF-TOKEN esté configurada en las herramientas de desarrollador del...

CVE-2022-0155-PoC

Prueba de concepto PoC de CVE-2022-0155 Este repositorio contiene una demostración de la vulnerabilidad CVE-2022-0155. La vulnerabilidad fue detectada por ranjit-git y se describe en detalle aquí. El propósito de esta PoC es demostrar que la vulnerabilidad no solo se aplica a escenarios donde...

axios-ssrf

Get Started run pnpm install on the root, backend, and frontend directories run pnpm start:dev on the root directory Vulnerabilities This website is published on: https://axios-ssrf.onrender.com/ Server Side Request Forgery: I specifically used a version of axios that is vulnerable to SSRF attack...

ROOT-APP-NPM-GHSA-PMV8-RQ9R-6J72 GHSA-pmv8-rq9r-6j72 in axios - Patched by Root

Root has patched GHSA-pmv8-rq9r-6j72 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root

Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-XJ6Q-8X83-JV6G GHSA-xj6q-8x83-jv6g in axios - Patched by Root

Root has patched GHSA-xj6q-8x83-jv6g in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-HCPX-6FM6-WX23 GHSA-hcpx-6fm6-wx23 in axios - Patched by Root

Root has patched GHSA-hcpx-6fm6-wx23 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-JQH4-M9W3-8HP9 GHSA-jqh4-m9w3-8hp9 in axios - Patched by Root

Root has patched GHSA-jqh4-m9w3-8hp9 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-7Q8Q-RJ6J-MHJQ GHSA-7q8q-rj6j-mhjq in axios - Patched by Root

Root has patched GHSA-7q8q-rj6j-mhjq in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-42H9-826W-CGV3 GHSA-42h9-826w-cgv3 in axios - Patched by Root

Root has patched GHSA-42h9-826w-cgv3 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-F4GW-2P7V-4548 GHSA-f4gw-2p7v-4548 in axios - Patched by Root

Root has patched GHSA-f4gw-2p7v-4548 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-GCFJ-64VW-6MP9 GHSA-gcfj-64vw-6mp9 in axios - Patched by Root

Root has patched GHSA-gcfj-64vw-6mp9 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-MWF2-3PR3-8698 GHSA-mwf2-3pr3-8698 in axios - Patched by Root

Root has patched GHSA-mwf2-3pr3-8698 in the axios package for Root:npm. Multiple fixed versions available...

axios-supply-chain-cve-2026-26555

🔍 Investigación de Vulnerabilidades Una colección curada de análisis detallados de vulnerabilidades que cubren incidentes de seguridad reales en el ecosistema de software. Cada entrada incluye un análisis técnico completo, prueba de concepto, listado de IOCs y guía de remediación. Propósito:...

axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution

A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle MITM attack. This enables the attacker to intercept, read, and modify all...

axios: Axios: Information disclosure of proxy credentials via redirect flows

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...

axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization

A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NOPROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the...