CVE-2026-67318 vulnerabilities

Vulnerabilities for packages: librechat, wazuh-dashboard, lerna, jitsucom-jitsu, gitlab-rails-ce-fips, langfuse, opensearch-dashboards-fips, semaphore, kibana, prism, wazuh-dashboard-fips, gitlab-rails-ce, kubeflow-centraldashboard, opensearch-dashboards, nextcloud-server, awx, redisinsight,...

Node.js Module axios 1.13.0 < 1.18.0 maxBodyLength Bypass (CVE-2026-67318)

The version of the axios Node.js module installed on the remote host is 1.13.0 prior to 1.18.0. It is, therefore, affected by a vulnerability: - axios fails to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. Because Node's HTTP/2...

Linux Distros Unpatched Vulnerability : CVE-2026-67318

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - axios versions =1.13.0 Node.js HTTP adapter fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with...

0xpay-cc-sdk (>=0.0.8, <=0.1.0), 123pancli (1.0.0) +6674 more potentially affected by CVE-2026-67318 via axios (>=1.13.0, <=1.17.0)

axios NPM version =1.13.0, =0.0.8, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.1.2-rc.0, =0.1.0, =0.1.4 and more Source cves: CVE-2026-67318 Source advisory: SNYK:JS-AXIOS-18060804...

0xpay-cc-sdk (>=0.0.8, <=0.1.0), 123pancli (1.0.0) +6674 more potentially affected by CVE-2026-67318 via axios (>=1.13.0, <=1.17.0)

axios NPM version =1.13.0, =0.0.8, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.1.2-rc.0, =0.1.0, =0.1.4 and more Source cves: CVE-2026-67318 Source advisory: OSV:GHSA-MWF2-3PR3-8698...