Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, for stream request bodies, maxBodyLength is bypassed when maxRedirects is set to 0 (native http/https transport path). Oversized streamed uploads are sent fully even when the caller sets strict body limits. This vulnerability is fixed in 1.15.1 and 0.31.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-24 | 1 | Patch1 |
| 2026-05-05 | 1 | General1 |
🟠 Axios, maxBodyLength Bypass, #CVE-2026-42034 (medium) https://dailycve.com/axios-maxbodylength-bypass-cve-2026-42034-medium/
Post summary
The post offers only a concise headline for a medium‑severity Axios maxBodyLength bypass (CVE‑2026‑42034), lacking specific exploitation, patching, or technical detail.
CVE-2026-42034 Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, for stream request bodies, maxBodyLength is bypassed when maxRedirects i… https://www.cve.org/CVERecord?id=CVE-2026-42034
Post summary
The text announces a vulnerability in Axios with a bypass of maxBodyLength for certain redirects and cites patched versions 1.15.1 and 0.31.1; no PoC, exploit, or active exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | axios | axios | - | node.js | - |