ROOT-APP-NPM-CVE-2026-67320 CVE-2026-67320 in axios - Patched by Root

Root has patched CVE-2026-67320 in the axios package for Root:npm. Multiple fixed versions available...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: awx, gitlab-rails-ce-fips, lerna, jitsucom-jitsu, wazuh-dashboard, azurite, redisinsight, kubeflow-centraldashboard, prism, librechat, opensearch-dashboards, langfuse, langfuse-fips, semaphore, wazuh-dashboard-fips, gitlab-rails-ce, kibana, nextcloud-server,...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: prism, kubeflow-centraldashboard, opensearch-dashboards, lerna, jitsucom-jitsu, langfuse, nextcloud-server...

Linux Distros Unpatched Vulnerability : CVE-2026-67320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +19067 more potentially affected by CVE-2026-42264 +1 more via axios (>=1.0.0, <=1.17.0)

axios NPM version =1.0.0, =0.0.8, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.1.2, =1.1.0, =2.0.0 and more Source cves: CVE-2026-42264, CVE-2026-67320 Source advisory: SNYK:JS-AXIOS-18065351...

@a-rt-works/auth0-deploy-cli (3.3.3), @acknow-srl/express-openid (>=1.0.0, <=1.0.1) +543 more potentially affected by CVE-2026-42264 +1 more via axios (>=0.31.1, <=0.32.0)

axios NPM version =0.31.1, =1.0.0, =0.0.1, =0.0.2, =1.3.2, =0.2.0, =0.0.2-beta.0, =2.0.14, =0.5.12, =1.0.0, =1.0.1, =32.0.0, =0.2.4, =0.3.0 and more Source cves: CVE-2026-42264, CVE-2026-67320 Source advisory: SNYK:JS-AXIOS-18065351...

0xtrails (>=0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, <=0.18.4), 123pancli (1.0.0) +4526 more potentially affected by CVE-2026-67320 via axios (>=1.15.2, <=1.17.0)

axios NPM version =1.15.2, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =0.1.0, =1.1.0, =0.1.0, =1.0.21, =0.1.4, =0.1.0, =1.0.10, =1.0.10, =0.6.6, =0.6.10, =0.6.9, =0.0.1, =0.0.7 - @0xfps/voidcli 0.0.1 and more Source cves: CVE-2026-67320 Source advisory: OSV:GHSA-GCFJ-64VW-6MP9...

@a-rt-works/auth0-deploy-cli (3.3.3), @acknow-srl/express-openid (>=1.0.0, <=1.0.1) +543 more potentially affected by CVE-2026-67320 via axios (>=0.31.1, <=0.32.0)

axios NPM version =0.31.1, =1.0.0, =0.0.1, =0.0.2, =1.3.2, =0.2.0, =0.0.2-beta.0, =2.0.14, =0.5.12, =1.0.0, =1.0.1, =32.0.0, =0.2.4, =0.3.0 and more Source cves: CVE-2026-67320 Source advisory: OSV:GHSA-GCFJ-64VW-6MP9...