axios vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-42035Highaxios: Axios: Header Injection via Prototype PollutionCVE-2026-42042Mediumaxios: Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean CoercionCVE-2026-42041Mediumaxios: Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge StrategyCVE-2026-42043Highaxios: Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0CVE-2026-42044Mediumaxios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`CVE-2026-42264Highaxios: Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijackingCVE-2026-42040Lowaxios: Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParamsCVE-2026-40175Mediumaxios: Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection ChainCVE-2025-62718Mediumaxios: Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRFCVE-2026-39865Mediumaxios: Axios HTTP/2 Session Cleanup State Corruption VulnerabilityCVE-2026-25639Highaxios: Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfigCVE-2025-58754Highaxios: Axios is vulnerable to DoS attack through lack of data size checkCVE-2025-27152Highaxios: axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URLCVE-2024-39338Highaxios: Server-Side Request Forgery in axiosCVE-2023-45857Mediumaxios: Axios Cross-Site Request Forgery VulnerabilityCVE-2021-3749Highaxios: axios Inefficient Regular Expression Complexity vulnerabilityCVE-2020-28168Mediumaxios: Axios vulnerable to Server-Side Request ForgeryCVE-2019-10742Highaxios: Denial of Service in axios

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo