IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
8.6Yüksek

CVE-2026-44492Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

axios axios; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Yayım: (5 ay önce)

Açıklama

Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IPv6 form (::ffff:7f00:1, ::ffff:a9fe:a9fe) still routes through the configured proxy. Node.js resolves these addresses to the underlying IPv4 host, so the request reaches the internal service via the proxy rather than being blocked. This vulnerability is fixed in 0.32.0 and 1.16.0.

Zayıflık türü (CWE): CWE-918CWE-289

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
acm 2.11 —
acm 2.13 —
acm 2.14 —
acm 2.15 —
acm 2.16 —
advanced cluster security 4.10 —
advanced cluster security 4.9 —
ansible automation platform 2.5 —
ansible automation platform 2.7 —
axios axios >= 1.0.0, < 1.16.0, < 0.32.0
container native virtualization 4.13 —
container native virtualization 4.14 —
discovery 2 —
migration toolkit applications 8.1 —
multicluster engine 2.10 —
multicluster engine 2.6 —
multicluster engine 2.8 —
multicluster engine 2.9 —
openshift 4.12 —
openshift 4.13 —
openshift 4.14 —
openshift 4.15 —
openshift 4.16 —
openshift 4.19 —
openshift 4.20 —
openshift 4.21 —
openshift ai 3.4 —
openshift devspaces 3.29 —
quay 3.10 —
quay 3.12 —
quay 3.15 —
quay 3.16 —
quay 3.9 —
Red Hat Cryostat 4 —
Red Hat Gatekeeper 3 —
Red Hat Migration Toolkit for Applications 8 —
Red Hat multicluster engine for Kubernetes 2.1 all versions
Red Hat multicluster engine for Kubernetes 2.6 all versions
Red Hat multicluster engine for Kubernetes 2.8 all versions
Red Hat multicluster engine for Kubernetes 2.9 all versions
Red Hat Network Observability Operator —
Red Hat OpenShift Pipelines all versions
Red Hat OpenShift Service Mesh 3 —
Red Hat Red Hat 3scale API Management Platform 2 —
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 all versions
Red Hat Red Hat Advanced Cluster Security 4.9 all versions
Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 all versions
Red Hat Red Hat AMQ Broker 7.13.6 —
Red Hat Red Hat AMQ Broker 7.14.1 —
Red Hat Red Hat Ansible Automation Platform 2 all versions
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 all versions
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 all versions
Red Hat Red Hat Ansible Automation Platform 2.7 all versions
Red Hat Red Hat Container Native Virtualization 4.13 all versions
Red Hat Red Hat Container Native Virtualization 4.14 all versions
Red Hat Red Hat Data Grid 8.6.2 —
Red Hat Red Hat Developer Hub 1.10 all versions
Red Hat Red Hat Developer Hub 1.9 all versions
Red Hat Red Hat Discovery 2 all versions
Red Hat Red Hat Migration Toolkit 1.8 all versions
Red Hat Red Hat Migration Toolkit for Applications 8.1 all versions
Red Hat Red Hat OpenShift AI 3.4 all versions
Red Hat Red Hat OpenShift Container Platform 4.12 all versions
Red Hat Red Hat OpenShift Container Platform 4.13 all versions
Red Hat Red Hat OpenShift Container Platform 4.14 all versions
Red Hat Red Hat OpenShift Container Platform 4.15 all versions
Red Hat Red Hat OpenShift Container Platform 4.16 all versions
Red Hat Red Hat OpenShift Container Platform 4.19 all versions
Red Hat Red Hat OpenShift Container Platform 4.20 all versions
Red Hat Red Hat OpenShift Container Platform 4.21 all versions
Red Hat Red Hat OpenShift Dev Spaces 3.29 all versions
Red Hat Red Hat OpenShift Service Mesh 2.6 all versions
Red Hat Red Hat OpenShift Service Mesh 3.0 all versions
Red Hat Red Hat OpenShift Service Mesh 3.1 all versions
Red Hat Red Hat OpenShift Service Mesh 3.2 all versions
Red Hat Red Hat OpenShift Service Mesh 3.3 all versions
Red Hat Red Hat Quay 3.10 all versions
Red Hat Red Hat Quay 3.12 all versions
Red Hat Red Hat Quay 3.15 all versions
Red Hat Red Hat Quay 3.16 all versions
Red Hat Red Hat Quay 3.9 all versions
Red Hat Red Hat Trusted Artifact Signer 1.3 all versions
rhdh 1.10 —
rhdh 1.9 —
rhmt 1.8 —
service mesh 2.6 —
service mesh 3.0 —
service mesh 3.1 —
service mesh 3.2 —
service mesh 3.3 —
trusted artifact signer 1.3 —

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (2)
  • cpe:2.3:a:axios:axios:*:*:*:*:*:node.js:*:* < 0.32.0
  • cpe:2.3:a:axios:axios:*:*:*:*:*:node.js:*:* ≥ 1.0.0 < 1.16.0