{"action":"Upgrade axios to 1.13.2 or later.","affected":[{"fixed":"1.13.2","introduced":"1.13.0"}],"component":"axios","cve_ids":["CVE-2026-39865"],"ecosystem":"npm","epss":0.00744,"exploited":false,"fixed_versions":["1.13.2"],"ghsa_id":"GHSA-qj83-cq47-w5f8","id":"tcs_01M5KG6C4DQPYS6KWZBJFMAA5E","modified_at":"2026-09-10T03:51:02.817552720Z","published_at":"2026-04-08T15:51:48Z","references":["https://osv.dev/vulnerability/GHSA-qj83-cq47-w5f8","https://github.com/axios/axios/security/advisories/GHSA-qj83-cq47-w5f8","https://nvd.nist.gov/vuln/detail/CVE-2026-39865","https://github.com/axios/axios/commit/0588880ac7ddba7594ef179930493884b7e90bf5","https://github.com/axios/axios","https://github.com/axios/axios/releases/tag/v1.13.2"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-qj83-cq47-w5f8","url":"https://osv.dev/vulnerability/GHSA-qj83-cq47-w5f8"}],"summary":"Axios HTTP/2 Session Cleanup State Corruption Vulnerability"}