A
Vendor security profile
axios
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs41
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
41toplam CVE
Uncertain41 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
41Unknown
Latest vulnerabilities
6.9
8.3
CVE-2026-101909Axios: Prototype Pollution Gadget in axios toFormData Options
Patch status unknownEPSS %0
6.9
CVE-2026-101908Axios: Prototype pollution gadget in fetch adapter can alter outbound requests
Patch status unknownEPSS %0
7.0
CVE-2026-101907Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF
Patch status unknownEPSS %0
8.2
6.9
CVE-2026-101904Axios: Header Injection via Inherited headers After Minimal Interceptor
Patch status unknownEPSS %0
8.2
CVE-2026-101903Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)
Patch status unknownEPSS %0
6.9
8.2
CVE-2026-101901Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization
Patch status unknownEPSS %0