Medium
Axios: Header Injection via Inherited headers After Minimal Interceptor
Type: advisorySource: Official CVE List
Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited Object.prototype.headers from a replacement request configuration. A separat…
Products: axiosCVEs: CVE-2026-101904