Denial Of Service (DoS)

🗓️ 15 Apr 2026 11:18:31Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

Axios has a Denial of Service flaw from HTTP two session cleanup state corruption that can crash the client.

Reporter	Title	Published	Views	Family All 70
IBM Security Bulletins	Security Bulletin: QRadar Deployment Intelligence App for IBM QRadar SIEM contains components with known vulnerabilities	25 Sep 202619:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in axios-1.12.2.tgz	1 Jun 202615:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to denial of service (CVE-2026-39865)	15 Apr 202609:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in axios-1.12.2.tgz	1 Jun 202619:28	–	ibm
IBM Security Bulletins	Security Bulletin:Axios HTTP/2 Session Cleanup Logic State Corruption Bug Fixed in 1.13.2	4 May 202612:39	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in axios (CVE-2026-39865, CVE-2025-62718, CVE-2026-25639, CVE-2026-40175)	17 Apr 202605:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	8 Jun 202607:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to axios-1.12.2.tgz (CVE-2026-25639, CVE-2026-39865)	21 Aug 202612:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Axios bundled with IBM Fusion, IBM Fusion HCI, IBM Fusion Data Cataloging and IBM Fusion Content-Aware Storage	9 Jul 202623:13	–	ibm
attackerkb	CVE-2026-39865	8 Apr 202614:25	–	attackerkb

Vulners

Node

axios axiosRange1.13.0–1.13.1js

axios axiosRange1.13.2–1.13.6js

Source	Link
github	www.github.com/axios/axios/releases/tag/v1.13.2
github	www.github.com/axios/axios/commit/12c314b603e7852a157e93e47edb626a471ba6c5
github	www.github.com/advisories/GHSA-qj83-cq47-w5f8
github	www.github.com/axios/axios/commit/0588880ac7ddba7594ef179930493884b7e90bf5
github	www.github.com/axios/axios/security/advisories/GHSA-qj83-cq47-w5f8

11 Sep 2026 23:05Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.9

EPSS0.00752

SSVC