UnratedFix available
axios v0.34.0 security fixes
axios v0.34.0 hardens request configuration against inherited properties and prevents excessive processing of crafted redirect hostnames.
Announced Source revision 1
Original source ↗github-axios-axios
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
🔒 Security Fixes Request Configuration: Prevent inherited properties from influencing form serializer options, default request methods, headers on interceptor-returned configs, and HTTP redirect hooks. Applications relying on inherited options must define those values as own properties. (#11172) Hostname Processing: Replace quadratic regular-expression backtracking in proxy bypass hostname normalization with a linear scan, preventing excessive processing of crafted redirect hostnames. (#11172)
axios
Release notes from axios
- Affected versions
- Not stated in this extraction
- Fixed versions
- v0.34.0
v0.34.0 — September 13, 2026
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #79168 · Revision 1
- Added to Heist Feed
- Publisher date