Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

axios Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-67321`axios 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 Denial of Service via maxDepth bypass	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published08/01/2026	SeverityMedium
`CVE-2026-67319`axios before 0.33.0 Prototype Pollution via nested option objects	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published08/01/2026	SeverityMedium
`CVE-2026-67318`axios 1.13.0 before 1.18.0 maxBodyLength Bypass via HTTP/2	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published08/01/2026	SeverityMedium
`CVE-2026-67316`axios before 1.18.0 Prototype Pollution via bodyless methods	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published08/01/2026	SeverityMedium
`CVE-2026-67315`axios 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 NO_PROXY Bypass via 0.0.0.0	Exploitation statusNot known exploited	FixYes	Affected productaxios	Published08/01/2026	SeverityMedium
`CVE-2026-67312`axios 0.28.0 before 0.33.0 Denial of Service via formToJSON	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published08/01/2026	SeverityMedium
`CVE-2026-67320`axios before 0.33.0 Prototype Pollution via Node HTTP adapter	Exploitation statusNot known exploited	FixYes	Affected productaxios	Published08/01/2026	SeverityHigh
`CVE-2026-67317`axios 1.7.0 before 1.18.0 maxBodyLength Bypass via ReadableStream	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published08/01/2026	SeverityMedium
`CVE-2026-67314`axios before 1.18.0 Prototype Pollution via auth subfields	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published08/01/2026	SeverityMedium
`CVE-2026-67313`axios 0.28.0 before 1.18.0 Denial of Service via formDataToJSON	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published08/01/2026	SeverityMedium
`CVE-2026-44486`Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published06/11/2026	SeverityHigh
`CVE-2026-44487`Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published06/11/2026	SeverityHigh
`CVE-2026-44488`Axios: Allocation of Resources Without Limits or Throttling in axios	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published06/11/2026	SeverityHigh
`CVE-2026-44490`Axios: DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published06/11/2026	SeverityMedium
`CVE-2026-44496`Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published06/11/2026	SeverityHigh
`CVE-2026-44495`Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published06/11/2026	SeverityHigh
`CVE-2026-44494`Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published06/11/2026	SeverityHigh
`CVE-2026-44489`Axios: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published06/11/2026	SeverityLow
`CVE-2026-44492`Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published06/11/2026	SeverityHigh
`CVE-2026-42264`Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published05/08/2026	SeverityHigh
`CVE-2026-42042`Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityMedium
`CVE-2026-42039`Axios: unbounded recursion in toFormData causes DoS via deeply nested request data	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityMedium
`CVE-2026-42036`Axios: HTTP adapter streamed responses bypass maxContentLength	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityMedium
`CVE-2026-42034`Axios: HTTP adapter streamed uploads bypass maxBodyLength when maxRedirects: 0	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityMedium
`CVE-2026-42037`Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityMedium
`CVE-2026-42038`Axios: no_proxy bypass via IP alias allows SSRF	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityMedium
`CVE-2026-42041`Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityHigh
`CVE-2026-42043`Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityHigh
`CVE-2026-42044`Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityHigh
`CVE-2026-42040`Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityLow
`CVE-2026-42035`Axios: Header Injection via Prototype Pollution	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityHigh
`CVE-2026-42033`Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/24/2026	SeverityHigh
`CVE-2026-40175`Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/10/2026	SeverityHigh
`CVE-2025-62718`Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/09/2026	SeverityMedium
`CVE-2026-39865`Axios HTTP/2 Session Cleanup State Corruption Vulnerability	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published04/08/2026	SeverityMedium
`CVE-2026-25639`Axios affected by Denial of Service via __proto__ Key in mergeConfig	Exploitation statusNot known exploited	FixYes	Affected productaxios	Published02/09/2026	SeverityHigh
`CVE-2025-58754`Axios is vulnerable to DoS attack through lack of data size check	Exploitation statusPublic exploit	FixNot confirmed	Affected productaxios	Published09/12/2025	SeverityHigh
`CVE-2025-27152`Possible SSRF and Credential Leakage via Absolute URL in axios Requests	Exploitation statusPublic exploit	FixYes	Affected productaxios	Published03/07/2025	SeverityHigh
`CVE-2024-57965`	Exploitation statusNot known exploited	FixYes	Affected productaxios	Published01/29/2025	SeverityInformational
`CVE-2024-39338`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published08/09/2024	SeverityMedium
`CVE-2023-45857`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published11/08/2023	SeverityUnknown
`CVE-2021-3749`Inefficient Regular Expression Complexity in axios/axios	Exploitation statusNot confirmed	FixNot confirmed	Affected productaxios/axios	Published08/31/2021	SeverityHigh
`CVE-2020-28168`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published11/06/2020	SeverityUnknown
`CVE-2019-10742`	Exploitation statusNot confirmed	FixNot confirmed	Affected productaxios	Published05/07/2019	SeverityUnknown

44 / 44 Results

All vulnerabilities loaded

Security vulnerabilities from axios

axios

How many security vulnerabilities does axios have?

Which axios product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular axios products

axios

axios/axios