Improper Encoding or Escaping of Output

🗓️ 24 Apr 2026 19:21:11Reported by Snyk Security DatabaseType

Axios vulnerability: improper encoding in AxiosURLSearchParams.toString allows NUL bytes; upgrade to 0.31.1 or 1.15.1+.

Reporter	Title	Published	Views	Family All 69
ibm	Security Bulletin:IBM Watson Discovery Cartridge affected by vulnerabilities in axios-1.12.2.tgz	9 Jun 202615:39	–	ibm
ibm	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities reported in the axios package	27 May 202612:48	–	ibm
ibm	Security Bulletin: IBM Edge Data Collector uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035	29 May 202610:24	–	ibm
ibm	Security Bulletin: IBM Maximo Scheduler Optimizer uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033	11 Jun 202615:44	–	ibm
ibm	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites	6 Jul 202610:09	–	ibm
ibm	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036)	4 Jun 202615:58	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	29 May 202616:59	–	ibm
ibm	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Axios	5 Jun 202609:39	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps	24 Jun 202612:59	–	ibm
ibm	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037	29 May 202607:20	–	ibm

Vulners

Node

axios axiosRange<0.31.1

axios axiosRange1.0.0–1.15.1

Source	Link
cwe	www.cwe.mitre.org/data/definitions/CWE-116.html
security	www.security.snyk.io/vuln/SNYK-JS-AXIOS-16298055

24 Apr 2026 19:21Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.13.7

CVSS 46.3

EPSS0.00217

SSVC