Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-15 | 1 | Active Exploitation1 |
| 2026-08-24 | 1 | General1 |
Cursor added axios. Three deps on the tree. A hundred packages under them. The pin was ^1.6.0. npm audit hit SSRF. CVE-2024-39338. The model never saw 1.7.4. Scan the tree, not just the file it wrote. npx -y safeweave-mcp
Post summary
The tweet reports that npm audit identified an SSRF vulnerability (CVE‑2024‑39338) in axios ^1.6.0, without providing any PoC, exploit, or patch information.
🔒 #CyberSecurity CVE-2024-39338: Active Exploitation of Marimo Pre-Auth RCE — Defense & Remediat… "Security teams utilizing Marimo, the open-source reactive notebook for Python, are facing a…" 🔗 https://securityarsenal.com/blog/cve-2024-39338-active-exploitation-of-marimo-pre-auth-rce-defense-and-remediation #CyberSecurity #ThreatIntel #vulnerability #cve #patch
Post summary
The post announces that CVE‑2024‑39338, a pre‑authentication RCE in Marimo, is currently being exploited in the wild, but does not provide PoC, exploit code, or remediation details in the snippet.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | axios | axios | - | node.js | - |