Skip to content

Commit a911c15

Browse files
eoftedalgithub-actions[bot]
eoftedal
and
github-actions[bot]
authored
Updated libraries (1): axios Updated vulnerability IDs (10): GHSA-42h9-826w-cgv3, GHSA-7q8q-rj6j-mhjq, GHSA-f4gw-2p7v-4548, GHSA-gcfj-64vw-6mp9, GHSA-hcpx-6fm6-wx23, GHSA-jqh4-m9w3-8hp9, GHSA-mmx7-hfxf-jppx, GHSA-mwf2-3pr3-8698, GHSA-pmv8-rq9r-6j72, GHSA-xj6q-8x83-jv6g Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 61a3098 commit a911c15

9 files changed

Lines changed: 584 additions & 146 deletions

‎repository/jsrepository-master.json‎

Lines changed: 40 additions & 10 deletions
Large diffs are not rendered by default.

‎repository/jsrepository-v2.json‎

Lines changed: 68 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -8289,7 +8289,10 @@
82898289
],
82908290
"identifiers": {
82918291
"summary": "Axios: Nested axios option objects can consume polluted prototype values",
8292-
"githubID": "GHSA-7q8q-rj6j-mhjq"
8292+
"githubID": "GHSA-7q8q-rj6j-mhjq",
8293+
"CVE": [
8294+
"CVE-2026-67319"
8295+
]
82938296
},
82948297
"info": [
82958298
"https://github.com/axios/axios/security/advisories/GHSA-7q8q-rj6j-mhjq",
@@ -8311,7 +8314,10 @@
83118314
],
83128315
"identifiers": {
83138316
"summary": "Axios: Excessive recursion in formDataToJSON can cause denial of service",
8314-
"githubID": "GHSA-42h9-826w-cgv3"
8317+
"githubID": "GHSA-42h9-826w-cgv3",
8318+
"CVE": [
8319+
"CVE-2026-67313"
8320+
]
83158321
},
83168322
"info": [
83178323
"https://github.com/axios/axios/security/advisories/GHSA-42h9-826w-cgv3",
@@ -8333,7 +8339,10 @@
83338339
],
83348340
"identifiers": {
83358341
"summary": "Axios: Deep formToJSON Key Recursion Can Cause Denial of Service",
8336-
"githubID": "GHSA-pmv8-rq9r-6j72"
8342+
"githubID": "GHSA-pmv8-rq9r-6j72",
8343+
"CVE": [
8344+
"CVE-2026-67312"
8345+
]
83378346
},
83388347
"info": [
83398348
"https://github.com/axios/axios/security/advisories/GHSA-pmv8-rq9r-6j72",
@@ -8355,7 +8364,10 @@
83558364
],
83568365
"identifiers": {
83578366
"summary": "Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios",
8358-
"githubID": "GHSA-f4gw-2p7v-4548"
8367+
"githubID": "GHSA-f4gw-2p7v-4548",
8368+
"CVE": [
8369+
"CVE-2026-67315"
8370+
]
83598371
},
83608372
"info": [
83618373
"https://github.com/axios/axios/security/advisories/GHSA-f4gw-2p7v-4548",
@@ -8377,7 +8389,10 @@
83778389
],
83788390
"identifiers": {
83798391
"summary": "Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning",
8380-
"githubID": "GHSA-gcfj-64vw-6mp9"
8392+
"githubID": "GHSA-gcfj-64vw-6mp9",
8393+
"CVE": [
8394+
"CVE-2026-67320"
8395+
]
83818396
},
83828397
"info": [
83838398
"https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9",
@@ -8398,7 +8413,10 @@
83988413
],
83998414
"identifiers": {
84008415
"summary": "Axios form serializer maxDepth bypass via {} metatoken",
8401-
"githubID": "GHSA-hcpx-6fm6-wx23"
8416+
"githubID": "GHSA-hcpx-6fm6-wx23",
8417+
"CVE": [
8418+
"CVE-2026-67321"
8419+
]
84028420
},
84038421
"info": [
84048422
"https://github.com/axios/axios/security/advisories/GHSA-hcpx-6fm6-wx23",
@@ -8419,7 +8437,10 @@
84198437
],
84208438
"identifiers": {
84218439
"summary": "Axios: Prototype pollution gadgets can alter axios request construction",
8422-
"githubID": "GHSA-mmx7-hfxf-jppx"
8440+
"githubID": "GHSA-mmx7-hfxf-jppx",
8441+
"CVE": [
8442+
"CVE-2026-67316"
8443+
]
84238444
},
84248445
"info": [
84258446
"https://github.com/axios/axios/security/advisories/GHSA-mmx7-hfxf-jppx",
@@ -9063,7 +9084,10 @@
90639084
],
90649085
"identifiers": {
90659086
"summary": "Axios: Excessive recursion in formDataToJSON can cause denial of service",
9066-
"githubID": "GHSA-42h9-826w-cgv3"
9087+
"githubID": "GHSA-42h9-826w-cgv3",
9088+
"CVE": [
9089+
"CVE-2026-67313"
9090+
]
90679091
},
90689092
"info": [
90699093
"https://github.com/axios/axios/security/advisories/GHSA-42h9-826w-cgv3",
@@ -9084,7 +9108,10 @@
90849108
],
90859109
"identifiers": {
90869110
"summary": "Axios: Nested axios option objects can consume polluted prototype values",
9087-
"githubID": "GHSA-7q8q-rj6j-mhjq"
9111+
"githubID": "GHSA-7q8q-rj6j-mhjq",
9112+
"CVE": [
9113+
"CVE-2026-67319"
9114+
]
90889115
},
90899116
"info": [
90909117
"https://github.com/axios/axios/security/advisories/GHSA-7q8q-rj6j-mhjq",
@@ -9105,7 +9132,10 @@
91059132
],
91069133
"identifiers": {
91079134
"summary": "Axios: Prototype pollution gadgets can alter axios request construction",
9108-
"githubID": "GHSA-mmx7-hfxf-jppx"
9135+
"githubID": "GHSA-mmx7-hfxf-jppx",
9136+
"CVE": [
9137+
"CVE-2026-67316"
9138+
]
91099139
},
91109140
"info": [
91119141
"https://github.com/axios/axios/security/advisories/GHSA-mmx7-hfxf-jppx",
@@ -9127,7 +9157,10 @@
91279157
],
91289158
"identifiers": {
91299159
"summary": "Axios: Deep formToJSON Key Recursion Can Cause Denial of Service",
9130-
"githubID": "GHSA-pmv8-rq9r-6j72"
9160+
"githubID": "GHSA-pmv8-rq9r-6j72",
9161+
"CVE": [
9162+
"CVE-2026-67312"
9163+
]
91319164
},
91329165
"info": [
91339166
"https://github.com/axios/axios/security/advisories/GHSA-pmv8-rq9r-6j72",
@@ -9148,7 +9181,10 @@
91489181
],
91499182
"identifiers": {
91509183
"summary": "Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`",
9151-
"githubID": "GHSA-jqh4-m9w3-8hp9"
9184+
"githubID": "GHSA-jqh4-m9w3-8hp9",
9185+
"CVE": [
9186+
"CVE-2026-67317"
9187+
]
91529188
},
91539189
"info": [
91549190
"https://github.com/axios/axios/security/advisories/GHSA-jqh4-m9w3-8hp9",
@@ -9166,7 +9202,10 @@
91669202
],
91679203
"identifiers": {
91689204
"summary": "Axios: HTTP/2 streamed uploads bypass `maxBodyLength`",
9169-
"githubID": "GHSA-mwf2-3pr3-8698"
9205+
"githubID": "GHSA-mwf2-3pr3-8698",
9206+
"CVE": [
9207+
"CVE-2026-67318"
9208+
]
91709209
},
91719210
"info": [
91729211
"https://github.com/axios/axios/security/advisories/GHSA-mwf2-3pr3-8698",
@@ -9185,7 +9224,10 @@
91859224
],
91869225
"identifiers": {
91879226
"summary": "Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios",
9188-
"githubID": "GHSA-f4gw-2p7v-4548"
9227+
"githubID": "GHSA-f4gw-2p7v-4548",
9228+
"CVE": [
9229+
"CVE-2026-67315"
9230+
]
91899231
},
91909232
"info": [
91919233
"https://github.com/axios/axios/security/advisories/GHSA-f4gw-2p7v-4548",
@@ -9206,7 +9248,10 @@
92069248
],
92079249
"identifiers": {
92089250
"summary": "Axios form serializer maxDepth bypass via {} metatoken",
9209-
"githubID": "GHSA-hcpx-6fm6-wx23"
9251+
"githubID": "GHSA-hcpx-6fm6-wx23",
9252+
"CVE": [
9253+
"CVE-2026-67321"
9254+
]
92109255
},
92119256
"info": [
92129257
"https://github.com/axios/axios/security/advisories/GHSA-hcpx-6fm6-wx23",
@@ -9228,7 +9273,10 @@
92289273
],
92299274
"identifiers": {
92309275
"summary": "Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning",
9231-
"githubID": "GHSA-gcfj-64vw-6mp9"
9276+
"githubID": "GHSA-gcfj-64vw-6mp9",
9277+
"CVE": [
9278+
"CVE-2026-67320"
9279+
]
92329280
},
92339281
"info": [
92349282
"https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9",
@@ -9249,7 +9297,10 @@
92499297
],
92509298
"identifiers": {
92519299
"summary": "Axios: Prototype pollution auth subfields can inject Basic auth",
9252-
"githubID": "GHSA-xj6q-8x83-jv6g"
9300+
"githubID": "GHSA-xj6q-8x83-jv6g",
9301+
"CVE": [
9302+
"CVE-2026-67314"
9303+
]
92539304
},
92549305
"info": [
92559306
"https://github.com/axios/axios/security/advisories/GHSA-xj6q-8x83-jv6g",

0 commit comments

Comments
 (0)