Security
فارسی
All products

Red Hat build of Apache Camel - HawtIO 4/axios

Red Hat · Package
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP AdapterCVE-2026-44487 · GHSA-P92Q-9VQR-4J8V axiosOpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel8 npmRed Hat High Fix reported
Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean CoercionCVE-2026-42042 · GHSA-XX6V-RP6X-Q39C axiosCryostat 4/axios npmRed Hat Medium Fix reported
axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)CVE-2026-44492 · GHSA-PJWM-PJ3P-43MV axiosOpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel8 npmRed Hat High Fix reported
Axios: no_proxy bypass via IP alias allows SSRFCVE-2026-42038 · GHSA-M7PR-HJQH-92CM axiosCryostat 4/axios npmRed Hat Medium Fix reported
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config MergeCVE-2026-44495 · GHSA-3G43-6GMG-66JW axiosOpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel8 npmRed Hat High Fix reported
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`CVE-2026-44494 · GHSA-35JP-WW65-95WH axiosOpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel8 npmRed Hat High Fix reported
axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functionsCVE-2026-44490 · GHSA-898C-Q2CR-XWHG axiosCryostat 4/axios npmRed Hat Medium Fix reported
Axios HTTP/2 Session Cleanup State Corruption VulnerabilityCVE-2026-39865 · GHSA-QJ83-CQ47-W5F8 axiosCryostat 4/axios npmRed Hat Medium Fix reported
Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijackingCVE-2026-42264 · GHSA-Q8QP-CVCW-X6JJ axiosOpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel8 npmRed Hat High Fix reported
Axios: Prototype pollution gadgets can alter axios request constructionCVE-2026-67316 · GHSA-MMX7-HFXF-JPPX axiosCryostat 4/axios npmRed Hat Medium Fix reported
Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connectionCVE-2026-44486 · GHSA-J5F8-GRM9-P9FC axiosOpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel8 npmRed Hat High Fix reported
Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name InjectionCVE-2026-44496 · GHSA-HFXV-24RG-XRQF axiosOpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel8 npmRed Hat High Fix reported
Allocation of Resources Without Limits or Throttling in AxiosCVE-2026-44488 · GHSA-777C-7FJR-54VF axiosOpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel8 npmRed Hat High Fix reported
Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParamsCVE-2026-42040 · GHSA-XHJH-PMCV-23JW axiosCryostat 4/axios npmRed Hat Low Fix reported
Axios: HTTP adapter streamed responses bypass maxContentLengthCVE-2026-42036 · GHSA-VF2M-468P-8V99 axiosCryostat 4/axios npmRed Hat Medium Fix reported
Axios has a Patch Bypass: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype FixCVE-2026-44489 · GHSA-654M-C8P4-X5FP axiosCryostat 4/axios npmRed Hat Low Fix reported
Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStreamCVE-2026-42037 · GHSA-445Q-VR5W-6Q77 axiosCryostat 4/axios npmRed Hat Medium Fix reported
Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0CVE-2026-42034 · GHSA-5C9X-8GCM-MPGX axiosCryostat 4/axios npmRed Hat Medium Fix reported
Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRFCVE-2025-62718 · GHSA-3P68-RC4W-QGX5 axiosGatekeeper 3/redhat-user-workloads/gatekeeper-3-18 npmRed Hat Medium Fix reported
Server-Side Request Forgery in axiosCVE-2024-39338 · GHSA-8HC4-VH64-CXMJ axiosMigration Toolkit for Runtimes/axios npmRed Hat High Fix reported