CVE-2026-67318 vulnerabilities

Vulnerabilities for packages: librechat, semaphore, awx, langfuse, jitsucom-jitsu, langfuse-fips, wazuh-dashboard, wazuh-dashboard-fips, kibana, redisinsight, kubeflow-centraldashboard, nextcloud-server, opensearch-dashboards, prism, gitlab-rails-ce, opensearch-dashboards-fips,...

Node.js Module axios 1.13.0 < 1.18.0 maxBodyLength Bypass (CVE-2026-67318)

The version of the axios Node.js module installed on the remote host is 1.13.0 prior to 1.18.0. It is, therefore, affected by a vulnerability: - axios fails to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. Because Node's HTTP/2...

Linux Distros Unpatched Vulnerability : CVE-2026-67318

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - axios versions =1.13.0 Node.js HTTP adapter fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with...

0xpay-cc-sdk (>=0.0.8, <=0.1.0), 123pancli (1.0.0) +6767 more potentially affected by CVE-2026-67318 via axios (>=1.13.0, <=1.17.0)

axios NPM version =1.13.0, =0.0.8, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.1.2-rc.0, =0.1.0, =0.1.4 and more Source cves: CVE-2026-67318 Source advisory: SNYK:JS-AXIOS-18060804...

com.alilitech:boot-plus-log (>=2.1.0, <=4.0.0), com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0) +8 more potentially affected by CVE-2026-67318 via org.webjars.npm:axios (>=1.1.3, <=1.7.2)

org.webjars.npm:axios MAVEN version =1.1.3, =2.1.0, =2.0.0, =1.0.3, =1.0.0, =2.1.1, =1.0.0, =1.0.0, =2.1.3, =2.0.0, =1.0.2, =1.0.9 Source cves: CVE-2026-67318 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-18060805...

0xpay-cc-sdk (>=0.0.8, <=0.1.0), 123pancli (1.0.0) +6767 more potentially affected by CVE-2026-67318 via axios (>=1.13.0, <=1.17.0)

axios NPM version =1.13.0, =0.0.8, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.2.0, =0.0.1-alpha.9, =0.0.3-alpha.31, =0.0.1-alpha.29, =0.1.6-alpha.14, =0.0.1-alpha.20, =1.1.2-rc.0, =0.1.0, =0.1.4 and more Source cves: CVE-2026-67318 Source advisory: OSV:GHSA-MWF2-3PR3-8698...