CVE-2026-101905 | Axios up to 1.19.x Node HTTP Adapter lib/adapters/http.js createConnection code injection

September 28, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Axios up to 1.19.x. This issue affects the function createConnection of the file lib/adapters/http.js of the component Node HTTP Adapter. Executing a manipulation can lead to code injection.

This vulnerability appears as CVE-2026-101905. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More