Skip to content
Threat Feed
Subscribe

Product

Axios (>= 1.15.1, < 1.20.0)

1 brief RSS
high advisory

Axios Fetch Adapter Fails to Enforce Redirect Limits

The Axios fetch adapter fails to enforce the maxRedirects: 0 configuration, enabling redirect-based SSRF by allowing requests to follow unexpected internal redirects.

axios +3 prototype-pollution javascript nodejs supply-chain ssrf library-vulnerability
2t