Skip to content
OpenAdvisories

Package · Ubuntu

node-axios

55 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2025-27152 Public exploit

    Possible SSRF and Credential Leakage via Absolute URL in axios Requests

    axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF…

    axios axios node-axios node-axios Debian Ubuntu npm
  • High 7.5
    CVE-2021-3749 Public exploit

    Inefficient Regular Expression Complexity in axios/axios

    axios is vulnerable to Inefficient Regular Expression Complexity

    axios axios/axios node-axios axios Debian Ubuntu npm