Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

JavaScript Library

axios

Promise based HTTP client for the browser and node.js

Official Site:

https://github.com/axios/axios

Severity Summary:

Critical: 5 High: 18 Medium: 21 Low: 1
Reference
Title
Severity
CVE-2026-101909
axios : Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) V
Medium
CVE-2026-101905
axios : Unintended Proxy or Intermediary (Confused Deputy) Vulnerability
Medium
CVE-2026-101902
axios : Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) V
Medium
CVE-2026-42034
axios Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2026-44489
axios Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response Splitting) Vulnerability
Medium
CVE-2020-28168
axios Server-Side Request Forgery (SSRF) Vulnerability
Medium
CVE-2026-42036
axios Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2026-42037
axios Improper Neutralization of CRLF Sequences (CRLF Injection) Vulnerability
Medium
CVE-2026-42041
axios Improper Authentication Vulnerability
Medium
CVE-2026-42042
axios Permissive List of Allowed Inputs Vulnerability
Medium
CVE-2026-40175
axios Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response Splitting) Vulnerability
Medium
CVE-2026-39865
axios Uncontrolled Resource Consumption Vulnerability
Medium
CVE-2023-45857
axios Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2026-101901
axios : Uncontrolled Resource Consumption Vulnerability
Medium
CVE-2026-42040
axios Improper Encoding or Escaping of Output Vulnerability
Low