Search: CVE-2026-42043

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 0.7%	CVE-2026-42043Node axios · Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other Critical10.0EPSS 0.7%2026-04-24GCVE DatabaseCVE-2026-42043 Axios versions prior to 1.15.1 and 0.31.1 contain a vulnerability that allows an attacker who can influence the target URL of an Axios request to bypass NO_PROXY protections for addresses in the 127.0.0.0/8 range (excluding 127.0.0.1). This issue can lead to server-side request forgery by accessing internal services. The vulnerability is fixed in Axios versions 1.15.1 and 0.31.1. Ubuntu has released patches for affected versions via Ubuntu Pro Extended Security Maintenance (ESM). EPSS 0.7%Vulnerability	GCVE Database	2026-04-24

Page 1 of 1