Debian/node-axios: high 7.5
Axios is a promise based HTTP client for the browser and Node.js. Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were sent with the fetch
Action: Upgrade node-axios to 1.16.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.0-1 | - |
Fixed versions
| 1.16.0-1 |
Sources
- osv: DEBIAN-CVE-2026-44488#Debian:14/node-axios
- https://security-tracker.debian.org/tracker/CVE-2026-44488
published · modified · JSON