Search for packages
Package details: pkg:npm/axios@1.6.0
purl pkg:npm/axios@1.6.0
Next non-vulnerable version 1.8.2
Latest non-vulnerable version 1.8.2
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-7x7s-eg2f-aaah
Aliases:
CVE-2024-39338
GHSA-8hc4-vh64-cxmj
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
1.7.4
Affected by 1 other vulnerability.
VCID-9kzj-nmnp-nbe3
Aliases:
CVE-2025-27152
GHSA-jr5f-v2jv-69x6
axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests
1.8.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-hfp7-rkga-aaak An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information. CVE-2023-45857
GHSA-wf5p-g6vw-rhxx

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T17:17:34.491729+00:00 GitLab Importer Affected by VCID-9kzj-nmnp-nbe3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2025-27152.yml 36.1.3
2025-06-20T17:06:19.160453+00:00 GitLab Importer Affected by VCID-7x7s-eg2f-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2024-39338.yml 36.1.3
2025-06-20T16:47:25.271671+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 36.1.3
2025-06-03T23:52:42.082705+00:00 GitLab Importer Affected by VCID-9kzj-nmnp-nbe3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2025-27152.yml 36.1.0
2025-06-03T23:42:29.214567+00:00 GitLab Importer Affected by VCID-7x7s-eg2f-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2024-39338.yml 36.1.0
2025-06-03T23:25:12.556950+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 36.1.0
2025-06-02T23:51:31.769548+00:00 GitLab Importer Affected by VCID-9kzj-nmnp-nbe3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2025-27152.yml 36.1.2
2025-06-02T23:40:45.339796+00:00 GitLab Importer Affected by VCID-7x7s-eg2f-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2024-39338.yml 36.1.2
2025-06-02T23:22:43.275564+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 36.1.2
2025-04-09T00:22:55.579296+00:00 GitLab Importer Affected by VCID-9kzj-nmnp-nbe3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2025-27152.yml 36.0.0
2025-04-03T22:20:23.553013+00:00 GitLab Importer Affected by VCID-7x7s-eg2f-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2024-39338.yml 36.0.0
2025-04-03T21:43:59.925358+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 36.0.0
2025-02-18T04:03:20.398145+00:00 GitLab Importer Affected by VCID-7x7s-eg2f-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2024-39338.yml 35.1.0
2025-02-18T03:39:13.054072+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 35.1.0
2024-11-21T01:12:07.046635+00:00 GitLab Importer Affected by VCID-7x7s-eg2f-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2024-39338.yml 35.0.0
2024-11-21T00:58:40.097886+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 35.0.0
2024-11-19T01:00:42.224187+00:00 GitLab Importer Affected by VCID-7x7s-eg2f-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2024-39338.yml 34.3.2
2024-11-19T00:40:18.260929+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 34.3.2
2024-10-15T19:17:34.819650+00:00 GithubOSV Importer Fixing VCID-hfp7-rkga-aaak https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/11/GHSA-wf5p-g6vw-rhxx/GHSA-wf5p-g6vw-rhxx.json 34.0.2
2024-10-08T01:38:29.393312+00:00 GitLab Importer Affected by VCID-7x7s-eg2f-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2024-39338.yml 34.0.2
2024-10-08T01:19:16.917269+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 34.0.2
2024-10-07T22:18:10.908195+00:00 GHSA Importer Affected by VCID-7x7s-eg2f-aaah https://github.com/advisories/GHSA-8hc4-vh64-cxmj 34.0.2
2024-10-07T21:45:23.443624+00:00 GHSA Importer Fixing VCID-hfp7-rkga-aaak https://github.com/advisories/GHSA-wf5p-g6vw-rhxx 34.0.2
2024-09-23T01:41:59.861877+00:00 GitLab Importer Affected by VCID-7x7s-eg2f-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2024-39338.yml 34.0.1
2024-09-22T22:44:25.684044+00:00 GHSA Importer Affected by VCID-7x7s-eg2f-aaah https://github.com/advisories/GHSA-8hc4-vh64-cxmj 34.0.1
2024-09-18T09:21:45.694577+00:00 GithubOSV Importer Fixing VCID-hfp7-rkga-aaak https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/11/GHSA-wf5p-g6vw-rhxx/GHSA-wf5p-g6vw-rhxx.json 34.0.1
2024-09-17T22:43:14.950416+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 34.0.1
2024-09-17T22:18:18.631790+00:00 GHSA Importer Fixing VCID-hfp7-rkga-aaak https://github.com/advisories/GHSA-wf5p-g6vw-rhxx 34.0.1
2024-05-17T20:52:49.286383+00:00 GHSA Importer Fixing VCID-hfp7-rkga-aaak None 34.0.0rc4
2024-04-24T03:54:48.824922+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 34.0.0rc4
2024-04-23T23:13:51.748133+00:00 GithubOSV Importer Fixing VCID-hfp7-rkga-aaak https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/11/GHSA-wf5p-g6vw-rhxx/GHSA-wf5p-g6vw-rhxx.json 34.0.0rc4
2024-04-23T17:41:43.228800+00:00 GHSA Importer Fixing VCID-hfp7-rkga-aaak https://github.com/advisories/GHSA-wf5p-g6vw-rhxx 34.0.0rc4
2024-01-10T06:35:29.794157+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 34.0.0rc2
2024-01-10T03:00:04.681294+00:00 GHSA Importer Fixing VCID-hfp7-rkga-aaak https://github.com/advisories/GHSA-wf5p-g6vw-rhxx 34.0.0rc2
2024-01-10T03:00:04.223858+00:00 GHSA Importer Fixing VCID-hfp7-rkga-aaak None 34.0.0rc2
2024-01-03T18:05:08.478325+00:00 GitLab Importer Fixing VCID-hfp7-rkga-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/axios/CVE-2023-45857.yml 34.0.0rc1
2024-01-03T17:47:40.656340+00:00 GHSA Importer Fixing VCID-hfp7-rkga-aaak https://github.com/advisories/GHSA-wf5p-g6vw-rhxx 34.0.0rc1