Search for packages
purl | pkg:npm/axios@0.21.2 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-9kzj-nmnp-nbe3
Aliases: CVE-2025-27152 GHSA-jr5f-v2jv-69x6 |
axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
VCID-bnke-ggs1-aaac
Aliases: CVE-2022-1214 |
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository axios/axios prior to 0.26. |
Affected by 2 other vulnerabilities. |
VCID-hfp7-rkga-aaak
Aliases: CVE-2023-45857 GHSA-wf5p-g6vw-rhxx |
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 2 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-dadn-n4tm-aaae | Incorrect Comparison axios is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3749
GHSA-cph5-m8f7-6c5x |