https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 04:33:30 +0000 https://vulnerability.circl.lu/vuln/cve-2026-42040 <p><strong>Affected:</strong> axios</p> <p>Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode() function in lib/helpers/AxiosURLSearchParams.js contains a character mapping (charMap) at line 21 that reverses the safe percent-encoding of null bytes. After encodeURIComponent(&#39;\x00&#39;) correctly produces the safe sequence %00, the charMap entry &#39;%00&#39;: &#39;\x00&#39; converts it back to a raw null byte. Primary impact is limited because the standard axios request flow is not affected. This vulnerability is fixed in 1.15.1 and 0.31.1.</p> <p><strong>Affected:</strong> axios</p> <p>Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode() function in lib/helpers/AxiosURLSearchParams.js contains a character mapping (charMap) at line 21 that reverses the safe percent-encoding of null bytes. After encodeURIComponent(&#39;\x00&#39;) correctly produces the safe sequence %00, the charMap entry &#39;%00&#39;: &#39;\x00&#39; converts it back to a raw null byte. Primary impact is limited because the standard axios request flow is not affected. This vulnerability is fixed in 1.15.1 and 0.31.1.</p> https://vulnerability.circl.lu/vuln/cve-2026-42040