Medium
CVE-2026-39865
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 94
Reset filters
Critical
ghsa-3hfp-gqgh-xc5g
Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions
Critical
CVE-2026-34841
Axios npm Supply Chain Incident Impacting @usebruno/cli
High
CVE-2025-70058
yapi disables TLS/SSL certificate validation via rejectUnauthorized: false in Axios HTTPS agent
High
CVE-2026-25639
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
Medium
CVE-2026-24767
NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality
High
ghsa-h3hw-29fv-2x75
@envelop/graphql-modules has a Race Condition vulnerability
Medium
CVE-2025-69202
axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header
Medium
ghsa-xvp7-8vm8-xfxx
Actual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers
High
CVE-2025-58754
Axios is vulnerable to DoS attack through lack of data size check
Medium
CVE-2025-30350
Directus's S3 assets become unavailable after a burst of HEAD requests
Medium
CVE-2025-30225
Directus's S3 assets become unavailable after a burst of malformed transformations
High
CVE-2025-27152
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL
High
CVE-2024-39338
Server-Side Request Forgery in axios
Medium
CVE-2024-28849
follow-redirects' Proxy-Authorization header kept across hosts
Medium
CVE-2023-45857
Axios Cross-Site Request Forgery Vulnerability
Medium
CVE-2023-26492
Directus vulnerable to Server-Side Request Forgery On File Import
High
CVE-2021-3749
axios Inefficient Regular Expression Complexity vulnerability
Medium
CVE-2020-28168
Axios vulnerable to Server-Side Request Forgery
Critical
ghsa-8w9j-6wg6-qv4f
Malicious Package in axioss
Critical
ghsa-r2rg-683g-ff96
Malicious Package in axios-http
High
CVE-2019-10742
Denial of Service in axios
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.