Medium
Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders
Type: advisorySource: Official CVE List
Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append, and getHeaders properties while resolving FormData headers. A separ…
Products: axiosCVEs: CVE-2026-101900