Lucene search
K

8 matches found

NVD
NVD
added 2026/01/07 11:15 p.m.1 views

CVE-2026-21697

axios4go is a Go HTTP client library. Prior to version 0.6.4, a race condition vulnerability exists in the shared HTTP client configuration. The global defaultClient is mutated during request execution without synchronization, directly modifying the shared http.Client's Transport, Timeout, and...

8.2CVSS0.00158EPSS
Exploits0References3
OSV
OSV
added 2026/01/07 10:29 p.m.2 views

CVE-2026-21697 axios4go's Race Condition in Shared HTTP Client Allows Proxy Configuration Leak

axios4go is a Go HTTP client library. Prior to version 0.6.4, a race condition vulnerability exists in the shared HTTP client configuration. The global defaultClient is mutated during request execution without synchronization, directly modifying the shared http.Client's Transport, Timeout, and...

8.2CVSS6.6AI score0.00158EPSS
Exploits0References5
EUVD
EUVD
added 2026/01/07 10:29 p.m.5 views

EUVD-2026-1381

axios4go is a Go HTTP client library. Prior to version 0.6.4, a race condition vulnerability exists in the shared HTTP client configuration. The global defaultClient is mutated during request execution without synchronization, directly modifying the shared http.Client's Transport, Timeout, and...

8.2CVSS6.4AI score0.00158EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/07 10:29 p.m.19 views

CVE-2026-21697 axios4go's Race Condition in Shared HTTP Client Allows Proxy Configuration Leak

axios4go is a Go HTTP client library. Prior to version 0.6.4, a race condition vulnerability exists in the shared HTTP client configuration. The global defaultClient is mutated during request execution without synchronization, directly modifying the shared http.Client's Transport, Timeout, and...

8.2CVSS0.00158EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/07 10:29 p.m.1 views

CVE-2026-21697 axios4go's Race Condition in Shared HTTP Client Allows Proxy Configuration Leak

axios4go is a Go HTTP client library. Prior to version 0.6.4, a race condition vulnerability exists in the shared HTTP client configuration. The global defaultClient is mutated during request execution without synchronization, directly modifying the shared http.Client's Transport, Timeout, and...

8.2CVSS6.5AI score0.00158EPSS
Exploits0References3
CVE
CVE
added 2026/01/07 10:29 p.m.6 views

CVE-2026-21697

CVE-2026-21697 affects the Go HTTP client library axios4go. Prior to version 0.6.4, a race condition mutates the shared default http.Client configuration during request execution without synchronization, directly altering Transport, Timeout, and CheckRedirect. This can enable leakage of proxy con...

8.2CVSS6.5AI score0.00158EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.2 views

PT-2026-2093

Name of the Vulnerable Software and Affected Versions axios4go versions prior to 0.6.4 Description axios4go is a Go HTTP client library affected by a race condition in its shared HTTP client configuration. The global defaultClient is modified during request execution without proper synchronizatio...

8.2CVSS6.9AI score0.00158EPSS
Exploits0References10
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.1 views

axios4go 竞争条件问题漏洞

axios4go is an HTTP client library by the individual developers at Rez Moss. A competitive condition issue vulnerability exists in axios4go versions prior to 0.6.4, which stems from the presence of a competitive condition in shared HTTP client configurations, which could lead to modification of...

8.2CVSS6.4AI score0.00158EPSS
Exploits0References3
Rows per page
Query Builder