highaxiosCVE-2026-44487
Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter
Affected versions
>= 1.0.0, < 1.16.0, fixed in 1.16.0<= 0.31.1, fixed in 0.32.0
Published 2026-06-04. Last checked 2026-11-01. Read the source advisory