highaxiosCVE-2026-101906
Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location
Affected versions
>= 1.15.0, < 1.20.0, fixed in 1.20.0
Published 2026-09-30. Last checked 2026-11-01. Read the source advisory