Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
streams for Apache Kafka 2/axios
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion
CVE-2026-42042 · GHSA-XX6V-RP6X-Q39C
axios
Cryostat 4/axios
npm
Red Hat
Medium
Fix reported
2026-09-10
Axios: no_proxy bypass via IP alias allows SSRF
CVE-2026-42038 · GHSA-M7PR-HJQH-92CM
axios
Cryostat 4/axios
npm
Red Hat
Medium
Fix reported
2026-09-10
Axios HTTP/2 Session Cleanup State Corruption Vulnerability
CVE-2026-39865 · GHSA-QJ83-CQ47-W5F8
axios
Cryostat 4/axios
npm
Red Hat
Medium
Fix reported
2026-09-10
Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking
CVE-2026-42264 · GHSA-Q8QP-CVCW-X6JJ
axios
OpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel8
npm
Red Hat
High
Fix reported
2026-09-10
Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams
CVE-2026-42040 · GHSA-XHJH-PMCV-23JW
axios
Cryostat 4/axios
npm
Red Hat
Low
Fix reported
2026-09-10
Axios: HTTP adapter streamed responses bypass maxContentLength
CVE-2026-42036 · GHSA-VF2M-468P-8V99
axios
Cryostat 4/axios
npm
Red Hat
Medium
Fix reported
2026-09-10
Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream
CVE-2026-42037 · GHSA-445Q-VR5W-6Q77
axios
Cryostat 4/axios
npm
Red Hat
Medium
Fix reported
2026-09-10
Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0
CVE-2026-42034 · GHSA-5C9X-8GCM-MPGX
axios
Cryostat 4/axios
npm
Red Hat
Medium
Fix reported
2026-09-10
