ROOT-APP-NPM-GHSA-9WX3-P993-35VP GHSA-9wx3-p993-35vp in axios - Patched by Root

Root has patched GHSA-9wx3-p993-35vp in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-67314 CVE-2026-67314 in axios - Patched by Root

Root has patched CVE-2026-67314 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-67319 CVE-2026-67319 in axios - Patched by Root

Root has patched CVE-2026-67319 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-67318 CVE-2026-67318 in axios - Patched by Root

Root has patched CVE-2026-67318 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-38GX-CFQF-F652 GHSA-38gx-cfqf-f652 in axios - Patched by Root

Root has patched GHSA-38gx-cfqf-f652 in the axios package for Root:npm. Multiple fixed versions available...

axios: Axios: Information disclosure via improper CIDR proxy bypass handling

A flaw was found in Axios. This vulnerability allows information disclosure when network traffic intended to bypass a proxy is improperly routed through it. Axios fails to parse Classless Inter-Domain Routing CIDR notation in proxy bypass lists as IP address ranges, treating them as plain text...

PT-2026-115993

Root has patched GHSA-9wx3-p993-35vp in the axios package for Root:npm. Multiple fixed versions available...

PT-2026-115990

Root has patched GHSA-3mcp-22mf-vrw3 in the axios package for Root:npm. Multiple fixed versions available...

PT-2026-115995

Root has patched GHSA-fqj3-h9pc-443h in the axios package for Root:npm. Multiple fixed versions available...

PT-2026-115989

Root has patched GHSA-39j5-w47m-2gmv in the axios package for Root:npm. Multiple fixed versions available...

PT-2026-115991

Root has patched GHSA-4ww2-rjh2-xpv9 in the axios package for Root:npm. Multiple fixed versions available...

PT-2026-115992

Root has patched GHSA-6hqm-hm2v-3p2p in the axios package for Root:npm. Multiple fixed versions available...

PT-2026-115994

Root has patched GHSA-fq2j-3j99-rx65 in the axios package for Root:npm. Multiple fixed versions available...

PT-2026-115988

Root has patched GHSA-38gx-cfqf-f652 in the axios package for Root:npm. Multiple fixed versions available...

axios: Axios: Information disclosure via improper CIDR proxy bypass handling

A flaw was found in Axios. This vulnerability allows information disclosure when network traffic intended to bypass a proxy is improperly routed through it. Axios fails to parse Classless Inter-Domain Routing CIDR notation in proxy bypass lists as IP address ranges, treating them as plain text...

axios: Axios: Information disclosure via improper CIDR proxy bypass handling

A flaw was found in Axios. This vulnerability allows information disclosure when network traffic intended to bypass a proxy is improperly routed through it. Axios fails to parse Classless Inter-Domain Routing CIDR notation in proxy bypass lists as IP address ranges, treating them as plain text...

Security Bulletin: Vulnerability in axios bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the axios library, which is affected by multiple vulnerabilities, including server-side request forgery, prototype pollution, and denial of service vulnerabilities. CVE-2026-44486, CVE-2026-44487, CVE-2026-44488,...

axios: axios: Security control bypass via unapplied HTTP/2 proxy and DNS settings

A flaw was found in axios. When processing HTTP/2 requests, the client fails to enforce configured proxy settings and custom Domain Name System DNS resolution policies. A remote attacker who can influence destination URLs could exploit this vulnerability to bypass outbound network restrictions,...

axios: axios: Request socket hijacking via inherited createConnection property

A flaw was found in axios. When running in Node.js, the HTTP adapter does not define an explicit connection creation setting on outgoing request options. If a separate prototype-pollution flaw is exploited in the same process, an attacker can hijack the network socket by injecting a malicious...

axios: Axios: Denial of Service via unhandled error in HTTP/2 session initialization

A flaw was found in Axios. A remote attacker or an unresponsive endpoint can cause a Denial of Service DoS by triggering an error during HTTP/2 session initialization or reuse. Because the underlying session fails to register proper error handlers, network or session failures result in an uncaugh...