Description
No description available.
Recommendation
Update the axios package to the latest compatible version. Followings are version details:
Affected version(s): **<= 0.30.2 >= 1.0.0, <= 1.13.4** Patched version(s): **0.30.3 1.13.5**
References
Could your website be exposed too?
SmartScanner can check your website for Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig and gives you actionable findings to investigate.
Start a free scanRelated Issues
- path-to-regexp vulnerable to Denial of Service via sequential optional groups - CVE-2026-4926
- React Router vulnerable to Denial of Service via reflected user input in single-fetch - CVE-2026-34077
- path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards - CVE-2026-4923
- Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection - CVE-2026-44496
You might also like:
See something that needs correcting? Let us knowUpdated May 08, 2026