npm/axios CVE-2023-45857: medium 6.5, EPSS 0.56%
Axios Cross-Site Request Forgery Vulnerability
Action: Upgrade axios to 0.28.0 or later.
npm i axios@1.6.0npm i axios@0.28.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.6.0 | - |
| 0.8.1 | 0.28.0 | - |
Fixed versions
| 1.6.0 | 0.28.0 |
Sources
- osv: GHSA-wf5p-g6vw-rhxx
- https://nvd.nist.gov/vuln/detail/CVE-2023-45857
- https://github.com/axios/axios/issues/6006
- https://github.com/axios/axios/issues/6022
- https://github.com/axios/axios/pull/6028
- https://github.com/axios/axios/pull/6091
- https://github.com/axios/axios/commit/2755df562b9c194fba6d8b609a383443f6a6e967
- https://github.com/axios/axios/commit/96ee232bd3ee4de2e657333d4d2191cd389e14d0
- https://github.com/axios/axios
- https://github.com/axios/axios/releases/tag/v0.28.0
- https://github.com/axios/axios/releases/tag/v1.6.0
- https://security.netapp.com/advisory/ntap-20240621-0006
- https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459
CVE-2023-45857 · published · modified · JSON