Search results

Inconsistent behavior between Bun.js and Node.js

Status: Open.

#6950 In axios/axios;

· sofianegargouri opened on Jun 26, 2025

<code>RangeError: Invalid array length</code> when <code>data</code> is set to a large <code>Buffer</code>

Status: Open.

#6949 In axios/axios;

· Cafe137 opened on Jun 26, 2025

Title: 🛡️ Medium Severity – Upgrade axios to Prevent Server-Side Request Forgery (SSRF) 📦 Affected Dependency Package: axios Vulnerability: Server-Side Request Forgery (SSRF) Severity: Medium CVE: CVE-2023-48359 Patched Version: &gt;=1.6.0 Affected Versions: &lt;1.6.0 🧨 Description The axios library is vulnerable to Server-Side Request Forgery (SSRF) when user input is unsanitized and directly used to construct server-side HTTP requests. Attackers may craft malicious URLs to: Access internal metadata services (e.g., AWS/GCP metadata APIs) Exfiltrate sensitive internal resources This vulnerability arises from insecure handling of request URLs in server environments where Axios is used to make HTTP calls. 📈 Potential Impact Unauthorized access to internal services Information leakage (tokens, credentials, configuration) Exploitable when unvalidated user input forms outbound requests

Status: Open.

#6946 In axios/axios;

· iamnikhilnikki opened on Jun 23, 2025

Title: 🔐 Upgrade axios to fix Cross-site Request Forgery (CSRF) vulnerability

Status: Open.

#6945 In axios/axios;

· iamnikhilnikki opened on Jun 23, 2025

Does axios support stream response now?

Status: Open.

#6942 In axios/axios;

· Liuhanlin23 opened on Jun 13, 2025

Axios v1.8.2 failing with <code>proxy: false</code> axios config

Status: Open.

#6941 In axios/axios;

· longieirl opened on Jun 11, 2025

AxiosError.response is undefined when HTTP stream is aborted after headers are received (Node.js)

Status: Open.

#6935 In axios/axios;

· theo-sim-dev opened on Jun 8, 2025

Error 401 with the 'follow-redirects' library since version 1.15.8

Status: Open.

#6929 In axios/axios;

· atjchen opened on Jun 4, 2025

Axios onUploadProgress error - Cannot read property 'loaded' of undefined

Status: Open.

#6928 In axios/axios;

· handylib opened on Jun 3, 2025

When redirects occur, https protocol become http

Status: Open.

#6918 In axios/axios;

· tsunufu opened on May 28, 2025

Issue: Clarification on Axios v0.30.0 Support Status

Status: Open.

#6912 In axios/axios;

· trantien1997 opened on May 5, 2025

Operational issues with axios dependencies

Status: Open.

#6900 In axios/axios;

· Pavan1925 opened on Apr 29, 2025