Media
CVE-2026-39865
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 94
Restablecer filtros
Crítica
ghsa-3hfp-gqgh-xc5g
Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions
Crítica
CVE-2026-34841
Axios npm Supply Chain Incident Impacting @usebruno/cli
Alta
CVE-2025-70058
yapi disables TLS/SSL certificate validation via rejectUnauthorized: false in Axios HTTPS agent
Alta
CVE-2026-25639
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
Media
CVE-2026-24767
NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality
Alta
ghsa-h3hw-29fv-2x75
@envelop/graphql-modules has a Race Condition vulnerability
Media
CVE-2025-69202
axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header
Media
ghsa-xvp7-8vm8-xfxx
Actual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers
Alta
CVE-2025-58754
Axios is vulnerable to DoS attack through lack of data size check
Media
CVE-2025-30350
Directus's S3 assets become unavailable after a burst of HEAD requests
Media
CVE-2025-30225
Directus's S3 assets become unavailable after a burst of malformed transformations
Alta
CVE-2025-27152
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL
Alta
CVE-2024-39338
Server-Side Request Forgery in axios
Media
CVE-2024-28849
follow-redirects' Proxy-Authorization header kept across hosts
Media
CVE-2023-45857
Axios Cross-Site Request Forgery Vulnerability
Media
CVE-2023-26492
Directus vulnerable to Server-Side Request Forgery On File Import
Alta
CVE-2021-3749
axios Inefficient Regular Expression Complexity vulnerability
Media
CVE-2020-28168
Axios vulnerable to Server-Side Request Forgery
Crítica
ghsa-8w9j-6wg6-qv4f
Malicious Package in axioss
Crítica
ghsa-r2rg-683g-ff96
Malicious Package in axios-http
Alta
CVE-2019-10742
Denial of Service in axios
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.