Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-05-05 | 3 | Disclosure1General2 |
| 2026-05-06 | 1 | Disclosure1 |
🟠 #ip-address npm library, Cross-Site Scripting (XSS), #CVE-2023-45857 (medium) https://dailycve.com/ip-address-npm-library-cross-site-scripting-xss-cve-2023-45857-medium/
Post summary
The post references a discovered XSS vulnerability (CVE‑2023‑45857) in the ip-address npm library, indicating its medium severity while offering no exploitation or mitigation details.
🔴 (Nodejs axios), CRLF Injection in multipart form-data, #CVE-2023-45857 (critical) https://dailycve.com/nodejs-axios-crlf-injection-in-multipart-form-data-cve-2023-45857-critical/
Post summary
The post announces the existence of CVE-2023-45857, a critical CRLF injection flaw in Node.js axios’ multipart form‑data handling, and links to an external article for further details.
🔴 Axios, Prototype Pollution, #CVE-2023-45857 (Critical) https://dailycve.com/axios-prototype-pollution-cve-2023-45857-critical/
Post summary
Highlights a critical prototype pollution CVE for Axios and links to a DailyCVE article, but provides no PoC, exploit, or mitigation details.
🔴 Axios, Prototype Pollution Gadget, #CVE-2023-45857 (Critical) https://dailycve.com/axios-prototype-pollution-gadget-cve-2023-45857-critical/
Post summary
The snippet merely references a CVE and a link, with no detailed information about the vulnerability, PoC, exploit, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | axios | axios | 1.5.1 | node.js | - |