Malicious code in nashira-yaml-axios-hyperion (npm)

The package nashira-yaml-axios-hyperion was found to contain malicious code...

Malicious code in axios-repository-markdownlint-electron-builder (npm)

The package axios-repository-markdownlint-electron-builder was found to contain malicious code...

MAL-2025-15214 Malicious code in await-pavo-glaciology-axios (npm)

The package await-pavo-glaciology-axios was found to contain malicious code...

MAL-2025-20047 Malicious code in exobiology-axios-cryovolcano-spinner (npm)

The package exobiology-axios-cryovolcano-spinner was found to contain malicious code...

MAL-2025-22506 Malicious code in holography-charon-axios-development (npm)

The package holography-charon-axios-development was found to contain malicious code...

MAL-2025-15236 Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)

The package axios-carpo-spectroscopy-dotenv-parse-variables was found to contain malicious code...

MAL-2025-30853 Malicious code in puppeteer-cluster-axios-standard (npm)

The package puppeteer-cluster-axios-standard was found to contain malicious code...

MAL-2025-15240 Malicious code in axios-repository-markdownlint-electron-builder (npm)

The package axios-repository-markdownlint-electron-builder was found to contain malicious code...

MAL-2025-19929 Malicious code in eventhoriz-meissa-morgan-axios (npm)

The package eventhoriz-meissa-morgan-axios was found to contain malicious code...

MAL-2025-36714 Malicious code in testcafe-bellatrix-axios-uglify-js (npm)

The package testcafe-bellatrix-axios-uglify-js was found to contain malicious code...

MAL-2025-15713 Malicious code in biosignature-carina-fomalhaut-axios (npm)

The package biosignature-carina-fomalhaut-axios was found to contain malicious code...

MAL-2025-15237 Malicious code in axios-ethology-indus-zenobia (npm)

The package axios-ethology-indus-zenobia was found to contain malicious code...

MAL-2025-15235 Malicious code in axios-antimatter-nextjs-leda (npm)

The package axios-antimatter-nextjs-leda was found to contain malicious code...

MAL-2025-15241 Malicious code in axios-transport-quantum-computing-terraforming (npm)

The package axios-transport-quantum-computing-terraforming was found to contain malicious code...

Security Bulletin: Vulnerabilities in axios affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in axios has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios...

Linux Distros Unpatched Vulnerability : CVE-2025-27152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even ...

Linux Distros Unpatched Vulnerability : CVE-2024-39338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs. CVE-2024-39338 Note that Nessus...

GHSA-RM8P-CX58-HCVX Withdrawn Advisory: Axios has Transitive Critical Vulnerability via form-data

Withdrawn Advisory This advisory has been withdrawn because users of Axios 1.10.0 have the flexibility to use a patched version of form-data, the software in which the vulnerability originates, without upgrading Axios to address GHSA-fjxv-7rqg-78g4. Original Description A critical vulnerability...

Withdrawn Advisory: Axios has Transitive Critical Vulnerability via form-data

Withdrawn Advisory This advisory has been withdrawn because users of Axios 1.10.0 have the flexibility to use a patched version of form-data, the software in which the vulnerability originates, without upgrading Axios to address GHSA-fjxv-7rqg-78g4. Original Description A critical vulnerability...

Security Bulletin: IBM Maximo Application Suite uses axios-1.7.7.tgz which is vulnerable to CVE-2024-57965.

Summary IBM Maximo Application Suite uses axios-1.7.7.tgz which is vulnerable to CVE-2024-57965. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not u...