4 matches found
CVE-2025-69202
Axios Cache Interceptor is a cache interceptor for axios. Prior to version 1.11.1, when a server calls an upstream service using different auth tokens, axios-cache-interceptor returns incorrect cached responses, leading to authorization bypass. The cache key is generated only from the URL, ignori...
@adamstankiewicz/openedx-frontend-platform (>=8.2.0, <=8.3.6), @altipla/directus-sdk-utils (0.7.2) +38 more potentially affected by CVE-2025-69202 via axios-cache-interceptor (>=1.0.0, <=1.8.3)
axios-cache-interceptor NPM version =1.0.0, =8.2.0, =1.6.3, =1.1.0, =15.0.0, =11.0.4, =1.0.2-test-cache.1, =8.1.2-alpha.1, =8.1.0, =8.5.2 - @fahami/directus-pkce 1.0.0 and more Source cves: CVE-2025-69202 Source advisory: OSV:GHSA-X4M5-4CW8-VC44...
CVE-2025-69202
Axios Cache Interceptor is a cache interceptor for axios. Prior to version 1.11.1, when a server calls an upstream service using different auth tokens, axios-cache-interceptor returns incorrect cached responses, leading to authorization bypass. The cache key is generated only from the URL, ignori...
@adamstankiewicz/openedx-frontend-platform (>=8.2.0, <=8.3.6), @altipla/directus-sdk-utils (0.7.2) +38 more potentially affected by CVE-2025-69202 via axios-cache-interceptor (>=1.0.0, <=1.8.3)
axios-cache-interceptor NPM version =1.0.0, =8.2.0, =1.6.3, =1.1.0, =15.0.0, =11.0.4, =1.0.2-test-cache.1, =8.1.2-alpha.1, =8.1.0, =8.5.2 - @fahami/directus-pkce 1.0.0 and more Source cves: CVE-2025-69202 Source advisory: SNYK:JS-AXIOSCACHEINTERCEPTOR-14724265...