CVE-2026-67313 in axiosinformation

Résumé

par MITRE • 01/08/2026

axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field names containing thousands of nested brackets to exhaust the JavaScript call stack and trigger RangeError, causing request failure or process termination in applications that do not handle the exception.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Réserver

29/07/2026

Divulgation

01/08/2026

Modérer

accepté

Entrée

VDB-385277

CPE

prêt

EPSS

0.00000

KEV

non

Activités

très faible

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-67313
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-67313
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-67313/

◂ PrécédentAperçuSuivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!