Known vulnerabilities in node-axios (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
node-axios (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:node-axios_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
0.19.0+dfsg-2ubuntu0.1~esm1
0.26.0+dfsg-1ubuntu0.1~esm1
1.6.8+dfsg-2ubuntu0.1~esm1
1.13.2+dfsg-1ubuntu0.1~esm1
1.11.0+dfsg-1
1.7.4+dfsg-1
1.7.7+dfsg-1
1.6.8+dfsg-1
1.6.2+dfsg-1
1.5.1+dfsg-1
1.2.1+dfsg-1
1.2.0+dfsg-1
1.1.3+dfsg-2
1.1.2+dfsg-1
1.1.2+dfsg-2
1.1.2+dfsg-3
1.1.3+dfsg-1
0.27.2+dfsg-1
0.27.2+dfsg-2
0.26.1+dfsg-2
0.26.1+dfsg-1
0.25.0+dfsg-1
0.25.0+dfsg-2
0.24.0+dfsg-1
0.21.3+dfsg-1
0.21.4+dfsg-1
0.22.0+dfsg-1
0.23.0+dfsg-1
0.23.0+dfsg-2
0.21.1+dfsg-1
0.21.0+dfsg-1
0.20.0+dfsg-1
0.19.2+dfsg-1
1.8.4+dfsg-1
1.7.9+dfsg-1
1.7.3+dfsg-1
1.6.8+dfsg-2
0.26.0+dfsg-1
0.19.0+dfsg
0.19.0+dfsg-1
0.19.0+dfsg-2
0.17.1+dfsg-2
0.17.1+dfsg-1
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2026-40175 |
CWE-113 | Medium | 0.19.0+dfsg-2ubuntu0.1~esm1, 0.26.0+dfsg-1ubuntu0.1~esm1, 1.6.8+dfsg-2ubuntu0.1~esm1, 1.13.2+dfsg-1ubuntu0.1~esm1 | 20.05.2026 |
SB2026052045 SB2026052051 SB2026052052 and 23 more |
||
| #VU127594 - Permissive List of Allowed Inputs CVE-2026-42043 |
CWE-183 | Medium | 0.19.0+dfsg-2ubuntu0.1~esm1, 0.26.0+dfsg-1ubuntu0.1~esm1, 1.6.8+dfsg-2ubuntu0.1~esm1, 1.13.2+dfsg-1ubuntu0.1~esm1 | 24.04.2026 |
SB20260424169 SB2026061954 SB2026061999 and 12 more |
||
| #VU127593 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-42044 |
CWE-1321 | Medium | 0.19.0+dfsg-2ubuntu0.1~esm1, 0.26.0+dfsg-1ubuntu0.1~esm1, 1.6.8+dfsg-2ubuntu0.1~esm1, 1.13.2+dfsg-1ubuntu0.1~esm1 | 24.04.2026 |
SB20260424168 SB2026062221 SB2026062508 and 10 more |
||
| #VU127592 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-42264 |
CWE-1321 | Medium | 0.19.0+dfsg-2ubuntu0.1~esm1, 0.26.0+dfsg-1ubuntu0.1~esm1, 1.6.8+dfsg-2ubuntu0.1~esm1, 1.13.2+dfsg-1ubuntu0.1~esm1 | 24.04.2026 |
SB20260424168 SB2026061999 SB20260619101 and 13 more |
||
| #VU125750 - Server-Side Request Forgery (SSRF) CVE-2025-62718 |
CWE-918 | High | 0.19.0+dfsg-2ubuntu0.1~esm1, 0.26.0+dfsg-1ubuntu0.1~esm1, 1.6.8+dfsg-2ubuntu0.1~esm1, 1.13.2+dfsg-1ubuntu0.1~esm1 | 10.04.2026 |
SB2026041001 SB2026050419 SB2026050715 and 33 more |