CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards-fips, nextcloud-server, redisinsight, opensearch-dashboards, semaphore, wazuh-dashboard-fips, kibana, prism, gitlab-rails-ce-fips, lerna, langfuse, gitlab-rails-ce, awx, librechat, kubeflow-centraldashboard, jitsucom-jitsu,...

CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard, opensearch-dashboards, langfuse, lerna...

CVE-2026-67317

axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers can supply unknown-length stream data to bypass upload size limits and cause uncontrolled network egress or resource...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +14458 more potentially affected by CVE-2026-67317 via axios (>=1.7.0, <=1.17.0)

axios NPM version =1.7.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.0, =0.1.0, =0.1.2, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =0.1.2 and more Source cves: CVE-2026-67317 Source advisory: OSV:GHSA-JQH4-M9W3-8HP9...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +14458 more potentially affected by CVE-2026-67317 via axios (>=1.7.0, <=1.17.0)

axios NPM version =1.7.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.0, =0.1.0, =0.1.2, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =0.1.2 and more Source cves: CVE-2026-67317 Source advisory: SNYK:JS-AXIOS-18065353...