highaxiosCVE-2026-44492
axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)
Affected versions
<= 0.31.1, fixed in 0.32.0>= 1.15.0, < 1.16.0, fixed in 1.16.0
Published 2026-05-29. Last checked 2026-11-01. Read the source advisory