CVE-2026-44492

EUVD-2026-36255

11.06.2026, 17:16

Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IPv6 form (::ffff:7f00:1, ::ffff:a9fe:a9fe) still routes through the configured proxy. Node.js resolves these addresses to the underlying IPv4 host, so the request reaches the internal service via the proxy rather than being blocked. This vulnerability is fixed in 0.32.0 and 1.16.0.

SSRF

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.6 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 55%

Affected Products (NVD)

Vendor	Product	Version
axios	axios	𝑥 < 0.32.0
axios	axios	1.0.0 ≤ 𝑥 < 1.16.0

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:2.5.20260715-1.el8ap ≤ 𝑥 < *	ADP
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:2.5.20260715-1.el9ap ≤ 𝑥 < *	ADP
Red Hat	multicluster engine for Kubernetes 2.6	1783351002 ≤ 𝑥 < *	ADP
Red Hat	multicluster engine for Kubernetes 2.8	1782157085 ≤ 𝑥 < *	ADP
Red Hat	multicluster engine for Kubernetes 2.9	1783348181 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	1783350952 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	1782157514 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	1783451729 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Advanced Cluster Security 4.9	1779371594 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	1779293013 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Ansible Automation Platform 2.7	1783919486 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Container Native Virtualization 4.13	1782426816 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Container Native Virtualization 4.14	1782356760 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Developer Hub 1.10	1783448184 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Developer Hub 1.9	1781187342 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Developer Hub 1.9	1782761244 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Discovery 2	1782166952 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Migration Toolkit 1.8	1783690532 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.14	1782911957 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.15	1782127091 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.16	1782244020 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.19	1782880472 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.20	1781695012 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.21	1781731914 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Dev Spaces 3.29	1782498475 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Dev Spaces 3.29	1782498792 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Service Mesh 2.6	1781937133 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Service Mesh 2.6	1782287580 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Service Mesh 3.0	1782201894 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Service Mesh 3.0	1782201833 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Service Mesh 3.1	1782201696 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Service Mesh 3.1	1782201537 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Service Mesh 3.2	1782201851 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Service Mesh 3.2	1782201812 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Service Mesh 3.3	1782231869 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Service Mesh 3.3	1782201466 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.1	1783750447 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.12	1783751865 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.12	1784353904 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.15	1784351966 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.16	1783955846 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Quay 3.9	1784125838 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Trusted Artifact Signer 1.3	1784105894 ≤ 𝑥 < *	ADP