axios
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 34 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 7, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection
Axios: Allocation of Resources Without Limits or Throttling in axios
Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter
Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection
Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)
Axios: DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions
Axios: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix
Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking
Monitor axios in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.