PT-2026-75815

TuxCare rebuilt axios to address 1 CVE. Fixed in 1.7.5-tuxcare.5...

PT-2026-75813

TuxCare rebuilt axios to address 1 CVE. Fixed in 1.6.2-tuxcare.4...

PT-2026-75814

TuxCare rebuilt axios to address 1 CVE. Fixed in 1.7.7-tuxcare.6...

PT-2026-75839

TuxCare rebuilt axios to address 1 CVE. Fixed in 0.18.1-tuxcare.4...

PT-2026-75848

TuxCare rebuilt axios to address 17 CVEs. Fixed in 0.26.0-tuxcare.4...

PT-2026-75220

TuxCare rebuilt axios to address 15 CVEs. Fixed in 0.21.4-tuxcare.1...

PT-2026-75380

TuxCare rebuilt axios to address 3 CVEs. Fixed in 1.7.5-tuxcare.1...

PT-2026-75388

TuxCare rebuilt axios to address 1 CVE. Fixed in 1.7.7-tuxcare.1...

PT-2026-74664

TuxCare rebuilt axios to address 1 CVE. Fixed in 0.15.3-tuxcare.3...

PT-2026-74693

TuxCare rebuilt axios to address 1 CVE. Fixed in 0.18.1-tuxcare.2...

PT-2026-75715

TuxCare rebuilt axios to address 2 CVEs. Fixed in 1.7.9-tuxcare.2...

PT-2026-75706

TuxCare rebuilt axios to address 2 CVEs. Fixed in 0.18.1-tuxcare.3...

PT-2026-75842

TuxCare rebuilt axios to address 1 CVE. Fixed in 0.15.3-tuxcare.6...

CVE-2026-67319

A flaw was found in axios. When the JavaScript environment's Object.prototype has been previously compromised through a technique known as prototype pollution, axios can inadvertently use malicious properties from nested configuration objects. This can lead to the silent injection of unauthorized...

CVE-2026-67312

A flaw was found in axios, a popular JavaScript library. An attacker can exploit this vulnerability by providing malicious form data containing deeply nested field names. This input triggers uncontrolled recursion within the formDataToJSON function, which is responsible for processing form data...

CVE-2026-67320

A flaw was found in axios when used in a Node.js deployment with the HTTP adapter. This vulnerability, known as Prototype Pollution, occurs because request interceptors can revert hardened request configurations, allowing an attacker to manipulate the Object.prototype.proxy property. If...

No title provided

A flaw was found in axios. A remote attacker could exploit an uncontrolled recursion vulnerability in the formDataToJSON function by supplying FormData with field names containing deeply nested bracket segments. This could exhaust the JavaScript call stack, leading to a RangeError and causing a...

axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth

A flaw was found in axios. This vulnerability involves prototype pollution read-side gadgets within the basic authentication subfield handling. If an application is already susceptible to a separate prototype pollution issue and makes an axios request without specifying username or password in it...

axios: axios: NO_PROXY bypass allows exposure of local services

A flaw was found in axios. This vulnerability occurs because the software fails to correctly identify 0.0.0.0 as a local loopback address when evaluating NOPROXY rules. A remote attacker could exploit this by providing a 0.0.0.0 URL, causing requests to bypass intended proxy restrictions. This...

axios: axios: Prototype Pollution allows unauthorized data transmission and network redirection

A flaw was found in axios, a widely used JavaScript library for making web requests. This vulnerability, known as prototype pollution, allows an attacker to subtly alter how network requests are built if another part of the system has already been compromised. This could lead to an attacker...