Search for packages
| purl | pkg:npm/axios@0.18.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-9kzj-nmnp-nbe3
Aliases: CVE-2025-27152 GHSA-jr5f-v2jv-69x6 |
axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-bnke-ggs1-aaac
Aliases: CVE-2022-1214 |
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository axios/axios prior to 0.26. |
Affected by 2 other vulnerabilities. |
|
VCID-dadn-n4tm-aaae
Aliases: CVE-2021-3749 GHSA-cph5-m8f7-6c5x |
Incorrect Comparison axios is vulnerable to Inefficient Regular Expression Complexity |
Affected by 3 other vulnerabilities. |
|
VCID-hfp7-rkga-aaak
Aliases: CVE-2023-45857 GHSA-wf5p-g6vw-rhxx |
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 2 other vulnerabilities. |
|
VCID-tgmj-3rf5-aaan
Aliases: CVE-2020-28168 GHSA-4w2v-q235-vp99 |
Axios NPM package contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address. |
Affected by 4 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-dc43-6h3s-aaaa | Denial of Service Axios allows attackers to cause a denial of service (application crash) by continuing to accepting content after `maxContentLength` is exceeded. |
CVE-2019-10742
GHSA-42xw-2xvc-qx8m |