{"action":"Upgrade @usebruno/cli to 3.2.1 or later.","affected":[{"fixed":"3.2.1","introduced":"0"}],"component":"@usebruno/cli","cve_ids":["CVE-2026-34841"],"ecosystem":"npm","epss":0.00231,"exploited":false,"fixed_versions":["3.2.1"],"ghsa_id":"GHSA-658g-p7jg-wx5g","id":"tcs_01M5KF5QET88N184EC42VN2ZHE","modified_at":"2026-04-06T23:49:31.823224Z","published_at":"2026-04-02T18:34:04Z","references":["https://osv.dev/vulnerability/GHSA-658g-p7jg-wx5g","https://github.com/usebruno/bruno/security/advisories/GHSA-658g-p7jg-wx5g","https://nvd.nist.gov/vuln/detail/CVE-2026-34841","https://github.com/axios/axios/issues/10604","https://github.com/usebruno/bruno/pull/7632","https://github.com/advisories/GHSA-fw8c-xr5c-95f9","https://github.com/usebruno/bruno","https://www.aikido.dev/blog/axios-npm-compromised-maintainer-hijacked-rat"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-658g-p7jg-wx5g","url":"https://osv.dev/vulnerability/GHSA-658g-p7jg-wx5g"}],"summary":"Axios npm Supply Chain Incident Impacting @usebruno/cli"}