115 matches found
Security Bulletin:Axios Prototype Pollution Vulnerability Fixed in Version 1.15.2
Summary Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser in the HTTP adapter are read via direct property access without hasOwnProperty guards,...
9.1CVSS7.3AI score0.00965EPSS
SaveExploits1Affected Software1
20