axios Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by axios

JSON RSS CSV 🔔 Create Alert Trigger

11 June 2026

Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection
CVE-2026-44486
AxiOSAxiOS7.5HIGH
Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter
CVE-2026-44487
AxiOSAxiOS8.2HIGH
Axios: Allocation of Resources Without Limits or Throttling in axios
CVE-2026-44488
AxiOSAxiOS7.5HIGH
Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection
CVE-2026-44496
AxiOSAxiOS7.5HIGH
Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
CVE-2026-44495
AxiOSAxiOS7HIGH
Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
CVE-2026-44494
AxiOSAxiOS8.7HIGH
Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)
CVE-2026-44492
AxiOSAxiOS8.6HIGH

8 May 2026

Prototype Pollution Vulnerability in Axios HTTP Client by Axios
CVE-2026-42264
AxiOSAxiOS7.4HIGH

24 April 2026

9 February 2026

TypeError Vulnerability in Axios HTTP Client Affects Browser and Node.js
CVE-2026-25639
AxiOSAxiOS7.5HIGH

12 September 2025

Denial of Service Vulnerability in Axios HTTP Client for Node.js
CVE-2025-58754
AxiOSAxiOS7.5HIGH

7 March 2025

SSRF Vulnerability in Axios HTTP Client for Browser and Node.js
CVE-2025-27152
AxiOSAxiOS🥇📈👾🟡7.7HIGH

12 August 2024

Axios 1.7.2 Vulnerability Could Lead to Server-Side Request Forgery
CVE-2024-39338
axiosAxiOS7.5HIGH

31 August 2021

Inefficient Regular Expression Complexity in axios/axios
CVE-2021-3749
AxiOSAxiOS/axiOS👾🟡7.5HIGH

7 May 2019

Denial of Service Vulnerability in Axios by Axios
CVE-2019-10742
AxiOSAxiOS👾🟡EPSS 13%7.5HIGH