Skip to content
Threat Feed
Subscribe

Product

Axios (< 1.16.1)

1 brief RSS
high advisory

Axios Node.js HTTP Adapter Vulnerable to Proxy Redirection via Prototype Pollution Bypass

A vulnerability in Axios's Node.js HTTP adapter, affecting versions 1.15.2 and 1.16.0, allows an attacker to bypass prototype pollution hardening, enabling redirection of HTTP requests through an attacker-controlled proxy to achieve sensitive information disclosure.

axios prototype-pollution information-disclosure nodejs
2t