Search for packages
purl | pkg:npm/axios@0.25.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-9kzj-nmnp-nbe3
Aliases: CVE-2025-27152 GHSA-jr5f-v2jv-69x6 |
axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
VCID-bnke-ggs1-aaac
Aliases: CVE-2022-1214 |
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository axios/axios prior to 0.26. |
Affected by 2 other vulnerabilities. |
VCID-hfp7-rkga-aaak
Aliases: CVE-2023-45857 GHSA-wf5p-g6vw-rhxx |
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 2 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |