Denial Of Service (DoS)

🗓️ 15 Apr 2026 11:18:31Reported by Veracode Vulnerability DatabaseType

Axios has a Denial of Service flaw from HTTP two session cleanup state corruption that can crash the client.

Reporter	Title	Published	Views	Family All 49
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in axios-1.12.2.tgz	1 Jun 202615:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to denial of service (CVE-2026-39865)	15 Apr 202609:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in axios-1.12.2.tgz	1 Jun 202619:28	–	ibm
IBM Security Bulletins	Security Bulletin:Axios HTTP/2 Session Cleanup Logic State Corruption Bug Fixed in 1.13.2	4 May 202612:39	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in axios (CVE-2026-39865, CVE-2025-62718, CVE-2026-25639, CVE-2026-40175)	17 Apr 202605:13	–	ibm
ATTACKERKB	CVE-2026-39865	8 Apr 202614:25	–	attackerkb
Chainguard	CVE-2026-39865 vulnerabilities	14 Apr 202601:17	–	cgr
Circl	CVE-2026-39865	7 Apr 202615:38	–	circl
CNNVD	Axios 安全漏洞	8 Apr 202600:00	–	cnnvd
CVE	CVE-2026-39865	8 Apr 202614:25	–	cve

Vulners

Node

axios axiosRange1.13.0–1.13.1js

axios axiosRange1.13.2–1.13.6js

Source	Link
github	www.github.com/axios/axios/releases/tag/v1.13.2
github	www.github.com/axios/axios/commit/12c314b603e7852a157e93e47edb626a471ba6c5
github	www.github.com/advisories/GHSA-qj83-cq47-w5f8
github	www.github.com/axios/axios/commit/0588880ac7ddba7594ef179930493884b7e90bf5
github	www.github.com/axios/axios/security/advisories/GHSA-qj83-cq47-w5f8

30 May 2026 05:48Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.9

EPSS0.00021

SSVC