CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: semaphore, librechat, prism, nextcloud-server, opensearch-dashboards, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, kubeflow-centraldashboard, kibana, langfuse-fips, jitsucom-jitsu, awx, lerna, langfuse, redisinsight...

CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: lerna, nextcloud-server, opensearch-dashboards, jitsucom-jitsu, prism, langfuse, kubeflow-centraldashboard...

CVE-2026-67317

axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers can supply unknown-length stream data to bypass upload size limits and cause uncontrolled network egress or resource...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +14447 more potentially affected by CVE-2026-67317 via axios (>=1.7.0, <=1.17.0)

axios NPM version =1.7.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.53, =0.1.0, =1.0.0, =0.1.0, =0.1.2, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =0.1.2 and more Source cves: CVE-2026-67317 Source advisory: OSV:GHSA-JQH4-M9W3-8HP9...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +14447 more potentially affected by CVE-2026-67317 via axios (>=1.7.0, <=1.17.0)

axios NPM version =1.7.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.53, =0.1.0, =1.0.0, =0.1.0, =0.1.2, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =0.1.2 and more Source cves: CVE-2026-67317 Source advisory: SNYK:JS-AXIOS-18065353...