Node.js Module axios 0.31.0 < 0.33.0 / 1.15.0 < 1.18.0 NO_PROXY Bypass (CVE-2026-67315)

Version 1.2

Aug 10, 2026, 9:45 AM

CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U")
CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C")
CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C")
Exploit attributes ("Exploit available" set to "False")
Exploit attributes ("Exploitability ease" set to "No known exploits are available")
CVSS metrics ("Cvssv4 threat score" set to 6.9)