highaxiosCVE-2026-101907
Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF
Affected versions
>= 1.17.0, < 1.20.0, fixed in 1.20.0
Published 2026-09-30. Last checked 2026-11-01. Read the source advisory
>= 1.17.0, < 1.20.0, fixed in 1.20.0Published 2026-09-30. Last checked 2026-11-01. Read the source advisory