EUVD-2026-25603

Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream...

Axios 注入漏洞

Axios is an open-source HTTP client developed by Axios. Versions of Axios from 1.0.0 to 1.15.1 had a injection vulnerability. This vulnerability stemmed from the FormDataPart constructor function, which directly inserted the value.type into the Content-Type header without clearing the CRLF...