CVE-2026-101899

Axios supports proxy environment variables and evaluates "NOPROXY" exclusions in the Node.js adapter. CIDR-form "NOPROXY" entries such as "127.0.0.0/8", "10.0.0.0/8", or "169.254.169.254/32" are not interpreted as IP ranges. As a result, a request to an IP address inside a configured CIDR exclusi...