Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affects Node.js usage, where an initial HTTP request is sent through an authenticated HTTP proxy, redirects are followed, and the redirected URL is no longer proxied. Under affected redirect shapes, the final origin can receive the proxy credential that was intended only for the outbound proxy. This vulnerability is fixed in 0.32.0 and 1.16.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 Axios Nodejs HTTP Adapter Credential Leak, #CVE-2026-44487 (High) -DC-Jun2026-228 https://dailycve.com/axios-nodejs-http-adapter-credential-leak-cve-2026-44487-high-dc-jun2026-228/
Post summary
The post announces the discovery of a high‑severity credential leak in the Axios Node.js HTTP adapter, identified as CVE‑2026‑44487.
CVE-2026-44487 Proxy-Authorization Header Leak in Axios Node.js HTTP Adapter Before 0.32.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44487
Post summary
The message announces CVE‑2026‑44487, detailing a Proxy‑Authorization header leak in Axios HTTP Adapter prior to version 0.32.0, without mentioning PoC, exploitation, patching, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | axios | axios | - | node.js | - |