Skip to content
OpenAdvisories

Package · Debian

node-axios

56 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-40175 Public exploit

    Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

    Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header …

    axios axios node-axios node-axios Debian Ubuntu npm
  • High 7.7
    CVE-2025-27152 Public exploit

    Possible SSRF and Credential Leakage via Absolute URL in axios Requests

    axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF…

    axios axios node-axios axios Debian Ubuntu npm
  • Medium 6.5
    CVE-2023-45857 Public exploit

    Axios Cross-Site Request Forgery Vulnerability

    An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

    node-axios axios node-axios Debian Ubuntu npm
  • High 7.5
    CVE-2021-3749 Public exploit

    Inefficient Regular Expression Complexity in axios/axios

    axios is vulnerable to Inefficient Regular Expression Complexity

    axios axios/axios node-axios axios Debian Ubuntu npm
  • High 7.5
    CVE-2019-10742 Public exploit

    Denial of Service in axios

    Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.

    axios axios node-axios axios Debian npm