Insertion Of Sensitive Information Into Sent Data

🗓️ 30 Apr 2026 17:02:27Reported by Veracode Vulnerability DatabaseType

Axios allows sensitive data leakage via truthy/falsy evaluation withXSRFToken checks to malicious endpoints.

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Axios	15 May 202609:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037	29 May 202607:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple axios vulnerabilities (CVE-2026-42033 through CVE-2026-42044).	2 Jun 202611:26	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in axios	21 May 202616:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses axios-1.15.0.tgz which is vulnerable to multiple CVEs.	1 Jun 202607:54	–	ibm
ATTACKERKB	CVE-2026-42042	24 Apr 202618:03	–	attackerkb
Chainguard	CVE-2026-42042 vulnerabilities	5 May 202619:17	–	cgr
Circl	CVE-2026-42042	5 May 202604:10	–	circl
CNNVD	Axios 安全漏洞	24 Apr 202600:00	–	cnnvd
CVE	CVE-2026-42042	24 Apr 202618:03	–	cve

Vulners

Node

axios axiosRange1.0.0-alpha.1–1.15.0js

axios axiosRange0.1.0–0.31.0js

axios axiosRange1.0.0–1.15.0js

Source	Link
github	www.github.com/axios/axios/commit/1728aa1b15b8857f970611fd8983c06b423fc486
github	www.github.com/axios/axios/commit/b0c632f36a5ea2e73c9bdf3a54164a8ede925736
github	www.github.com/axios/axios/security/advisories/GHSA-xx6v-rp6x-q39c

23 May 2026 05:28Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.4

EPSS0.00048

SSVC