Known vulnerabilities in axios - page 3

Vendor: axios
Software: axios
Software CPE: cpe:2.3:a:axios:axios:*:*:*:*:*:npm:*:*
Total vulnerabilities: 65
Public exploits: 8
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting axios axios is affected by 65 known vulnerabilities: 1 critical, 8 high, 45 medium, 11 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150717 - Inefficient Regular Expression Complexity
CVE-2026-101903
CWE-1333 Medium
No
No
1.20.0 17.09.2026 SB20260917241
#VU150716 - Inefficient Regular Expression Complexity
CVE-2026-101906
CWE-1333 Medium
No
No
1.20.0 17.09.2026 SB20260917241
#VU150715 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-101909
CWE-1321 High
No
No
0.34.0, 1.20.0 17.09.2026 SB20260917241
#VU150714 - Server-Side Request Forgery (SSRF)
CVE-2026-101898
CWE-918 High
No
No
1.20.0 17.09.2026 SB20260917241
#VU150713 - Uncaught Exception
CVE-2026-101901
CWE-248 Medium
No
No
1.20.0 17.09.2026 SB20260917241
#VU125749 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CWE-113 High
No
No
1.15.0 10.04.2026 SB2026041001
#VU125102 - Resource exhaustion
CVE-2026-39865
CWE-400 Medium
No
No
1.13.2 08.04.2026 SB2026040829
SB20260410109
SB20260410110
and 14 more
#VU124720 - Embedded Malicious Code
CWE-506 Critical
No
Exploited
- 31.03.2026 SB20260331101
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639
CWE-754 Medium
Available
No
1.13.5 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 25 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754
CWE-770 Medium
Available
No
1.12.0 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 52 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783
CWE-330 Medium
Available
No
1.11.0 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 63 more
#VU105862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-57965
CWE-79 Medium
No
No
1.7.8 19.03.2025 SB2025031916
SB2025031918
SB2025050262
and 14 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152
CWE-918 Medium
Available
No
1.8.2 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 43 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338
CWE-918 Medium
No
No
1.7.4 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU84993 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
1.6.4 04.01.2024 SB2024010430
#VU84992 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CWE-1321 Medium
No
No
1.6.4 04.01.2024 SB2024010430
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857
CWE-352 Low
No
No
0.28.0, 1.6.0 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU56963 - Resource exhaustion
CVE-2021-3749
CWE-400 Medium
No
No
0.21.2 30.09.2021 SB2021093011
SB2021093012
SB2021120334
and 5 more
#VU49251 - Server-Side Request Forgery (SSRF)
CVE-2020-28168
CWE-918 Medium
No
No
0.21.1 06.11.2020 SB2021010417
SB2021022518
SB2022061413
and 4 more
#VU49252 - Resource Management Errors
CVE-2019-10742
CWE-399 Medium
No
No
0.19.0 07.05.2019 SB2019050727


Showing elements 41 - 60 out of 65