Known vulnerabilities in axios

Vendor: axios
Software: axios
Software CPE: cpe:2.3:a:axios:axios:*:*:*:*:*:npm:*:*
Total vulnerabilities: 65
Public exploits: 8
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting axios axios is affected by 65 known vulnerabilities: 1 critical, 8 high, 45 medium, 11 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136919 - Uncontrolled Recursion
CVE-2026-67321
CWE-674 Medium
No
No
0.33.0, 1.18.0 06.07.2026 SB2026070641
SB20260917209
SB2026101520
#VU136918 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-67320
CWE-1321 Low
No
No
0.33.0, 1.18.0 06.07.2026 SB2026070641
SB2026083172
SB2026083174
and 5 more
#VU136917 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-67319
CWE-1321 Low
No
No
0.33.0, 1.18.0 06.07.2026 SB2026070641
SB20260917209
SB2026092813
and 3 more
#VU136916 - Resource exhaustion
CVE-2026-67318
CWE-400 Medium
No
No
1.18.0 06.07.2026 SB2026070641
SB20260917209
SB2026101520
#VU136915 - Allocation of Resources Without Limits or Throttling
CVE-2026-67317
CWE-770 Medium
No
No
1.18.0 06.07.2026 SB2026070641
SB20260917209
SB2026092813
and 3 more
#VU136912 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-67316
CWE-1321 Low
No
No
0.33.0, 1.18.0 06.07.2026 SB2026070641
SB2026091499
SB20260914100
and 6 more
#VU136913 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CWE-1321 Low
No
No
0.33.0, 1.18.0 06.07.2026 SB2026070641
#VU136914 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CWE-1321 Low
No
No
0.33.0, 1.18.0 06.07.2026 SB2026070641
#VU136911 - Permissive List of Allowed Inputs
CVE-2026-67315
CWE-183 Medium
No
No
0.33.0, 1.18.0 06.07.2026 SB2026070641
SB20260917209
SB2026101520
#VU136909 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-67314
CWE-1321 Low
No
No
1.18.0 06.07.2026 SB2026070641
SB20260917209
SB2026101520
#VU136910 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CWE-1321 Low
No
No
1.18.0 06.07.2026 SB2026070641
#VU136907 - Uncontrolled Recursion
CVE-2026-67313
CWE-674 Medium
No
No
1.18.0 06.07.2026 SB2026070641
SB20260917209
SB2026092813
and 3 more
#VU136908 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
1.18.0 06.07.2026 SB2026070641
#VU136906 - Resource exhaustion
CVE-2026-67312
CWE-400 Medium
No
No
0.33.0, 1.18.0 06.07.2026 SB2026070641
SB20260917209
SB2026092813
and 3 more
#VU133097 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44486
CWE-200 Medium
No
No
0.32.0, 1.16.0 31.05.2026 SB2026052927
SB2026061992
SB2026070157
and 16 more
#VU133096 - Inefficient Regular Expression Complexity
CVE-2026-44496
CWE-1333 Medium
No
No
0.32.0, 1.16.0 31.05.2026 SB2026052927
SB2026061992
SB2026070157
and 15 more
#VU132756 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-44490
CWE-1321 Medium
Available
No
0.32.0, 1.16.0 29.05.2026 SB2026052927
SB2026071542
SB2026072613
and 11 more
#VU132755 - Server-Side Request Forgery (SSRF)
CVE-2026-44492
CWE-918 Medium
Available
No
0.32.0, 1.16.0 29.05.2026 SB2026052927
SB2026061992
SB2026070157
and 16 more
#VU132751 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-44489
CWE-1321 Low
Available
No
1.16.0 29.05.2026 SB2026052927
SB2026072719
SB2026091111
and 2 more
#VU132750 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-44494
CWE-1321 High
Available
No
1.16.0 29.05.2026 SB2026052927
SB2026070157
SB2026070202
and 20 more


Showing elements 1 - 20 out of 65