[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-39338":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T16:22:42.503Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":33,"duplicate_of":9,"upstream":35,"downstream":36,"duplicates":45,"related":46,"reserved_at":9,"published_at":65,"modified_at":66,"state":67,"summary":68,"references_raw":76,"kevs":120,"epss":121,"epss_history":124,"metrics":388,"affected":401},"CVE-2024-39338","axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-918","Server-Side Request Forgery (SSRF)","The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","weakness","Incomplete","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-664","Server Side Request Forgery",[],[24],{"_key":25,"name":26,"source":27,"url":28,"maturity":29,"reliability_score":30,"verified":31,"type":9,"platforms":32,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_491F740C478FEBF3","Exploit Reference (jeffhacks.com)","reference","https://jeffhacks.com/advisories/2024/06/24/CVE-2024-39338.html","unknown",0.2,false,[],[34],"GHSA-8hc4-vh64-cxmj",[],[37,39,41,43],{"_key":38},"SUSE-SU-2024:3771-1",{"_key":40},"OPENSUSE-SU-2024:14282-1",{"_key":42},"UBUNTU-CVE-2024-39338",{"_key":44},"DEBIAN-CVE-2024-39338",[],[47,48,49,51,53,55,57,59,61,63],{"_key":38},{"_key":40},{"_key":50},"CGA-58F9-JC24-H5CH",{"_key":52},"CGA-8MXR-GWWC-5GVH",{"_key":54},"CGA-9PH2-9R6M-2J4Q",{"_key":56},"CGA-CQGQ-WVX7-4WXJ",{"_key":58},"CGA-CVR7-X2G5-2F3J",{"_key":60},"CGA-QPP8-JW3C-X3GV",{"_key":62},"CGA-RHV9-VCR9-V8HR",{"_key":64},"CGA-2482-XWFV-HWC3","2024-08-09T00:00:00.000Z","2024-08-15T19:26:34.904Z","Analyzed",{"cisa_kev":31,"cisa_ransomware":31,"cisa_vendor":9,"epss_severity":69,"epss_score":70,"severity":71,"severity_score":72,"severity_version":73,"severity_source":74,"severity_vector":75,"severity_status":67},"low",0.01414,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",[77,85,90,95,99,103,107,111,116],{"url":78,"sources":79,"tags":82},"https://github.com/axios/axios/releases",[80,74,81],"cve.org","osv_npm",[83,84],"Release Notes","WEB",{"url":28,"sources":86,"tags":87},[80,74,81],[88,89,84],"Exploit","Third Party Advisory",{"url":91,"sources":92,"tags":93},"https://nvd.nist.gov/vuln/detail/CVE-2024-39338",[81],[94],"Advisory",{"url":96,"sources":97,"tags":98},"https://github.com/axios/axios/issues/6463",[81],[84],{"url":100,"sources":101,"tags":102},"https://github.com/axios/axios/pull/6539",[81],[84],{"url":104,"sources":105,"tags":106},"https://github.com/axios/axios/pull/6543",[81],[84],{"url":108,"sources":109,"tags":110},"https://github.com/axios/axios/commit/6b6b605eaf73852fb2dae033f1e786155959de3a",[81],[84],{"url":112,"sources":113,"tags":114},"https://github.com/axios/axios",[81],[115],"PACKAGE",{"url":117,"sources":118,"tags":119},"https://github.com/axios/axios/releases/tag/v1.7.4",[81],[84],[],{"date":122,"score":70,"percentile":123},"2026-07-06",0.69493,[125,129,132,135,138,141,144,147,150,153,156,159,162,164,167,171,174,177,180,183,186,189,191,194,197,200,203,206,210,213,215,218,221,224,227,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,287,290,294,297,300,304,307,310,312,314,316,318,321,324,327,330,332,335,338,341,344,347,350,352,355,358,360,363,366,369,372,374,377,379,382,385],{"date":126,"score":127,"percentile":128},"2025-11-04",0.01587,0.80999,{"date":130,"score":127,"percentile":131},"2025-11-05",0.81001,{"date":133,"score":127,"percentile":134},"2025-11-06",0.81002,{"date":136,"score":127,"percentile":137},"2025-11-07",0.81013,{"date":139,"score":127,"percentile":140},"2025-11-08",0.81021,{"date":142,"score":127,"percentile":143},"2025-11-09",0.81017,{"date":145,"score":127,"percentile":146},"2025-11-10",0.8101,{"date":148,"score":127,"percentile":149},"2025-11-11",0.81016,{"date":151,"score":127,"percentile":152},"2025-11-12",0.81028,{"date":154,"score":127,"percentile":155},"2025-11-13",0.81035,{"date":157,"score":127,"percentile":158},"2025-11-14",0.8104,{"date":160,"score":127,"percentile":161},"2025-11-15",0.81036,{"date":163,"score":127,"percentile":161},"2025-11-16",{"date":165,"score":127,"percentile":166},"2025-11-17",0.81034,{"date":168,"score":169,"percentile":170},"2025-11-18",0.00183,0.35366,{"date":172,"score":169,"percentile":173},"2025-11-19",0.3537,{"date":175,"score":169,"percentile":176},"2025-11-20",0.35357,{"date":178,"score":127,"percentile":179},"2025-11-21",0.8105,{"date":181,"score":127,"percentile":182},"2025-11-22",0.81054,{"date":184,"score":127,"percentile":185},"2025-11-23",0.81045,{"date":187,"score":127,"percentile":188},"2025-11-24",0.81046,{"date":190,"score":127,"percentile":179},"2025-11-25",{"date":192,"score":127,"percentile":193},"2025-11-26",0.81052,{"date":195,"score":127,"percentile":196},"2025-11-27",0.81058,{"date":198,"score":127,"percentile":199},"2025-11-28",0.81048,{"date":201,"score":127,"percentile":202},"2025-11-29",0.81056,{"date":204,"score":127,"percentile":205},"2025-11-30",0.8106,{"date":207,"score":208,"percentile":209},"2025-12-01",0.01303,0.79231,{"date":211,"score":208,"percentile":212},"2025-12-02",0.79234,{"date":214,"score":208,"percentile":212},"2025-12-03",{"date":216,"score":127,"percentile":217},"2025-12-04",0.81062,{"date":219,"score":127,"percentile":220},"2025-12-05",0.8107,{"date":222,"score":127,"percentile":223},"2025-12-06",0.81072,{"date":225,"score":127,"percentile":226},"2025-12-07",0.81071,{"date":228,"score":127,"percentile":223},"2025-12-08",{"date":230,"score":127,"percentile":231},"2025-12-09",0.8109,{"date":233,"score":127,"percentile":234},"2025-12-10",0.81115,{"date":236,"score":127,"percentile":237},"2025-12-11",0.81125,{"date":239,"score":127,"percentile":240},"2025-12-12",0.8114,{"date":242,"score":127,"percentile":243},"2025-12-13",0.81139,{"date":245,"score":127,"percentile":246},"2025-12-14",0.81135,{"date":248,"score":127,"percentile":249},"2025-12-15",0.81132,{"date":251,"score":127,"percentile":252},"2025-12-16",0.81143,{"date":254,"score":127,"percentile":255},"2025-12-17",0.81152,{"date":257,"score":127,"percentile":258},"2025-12-18",0.8117,{"date":260,"score":127,"percentile":261},"2025-12-19",0.81178,{"date":263,"score":127,"percentile":264},"2025-12-20",0.81172,{"date":266,"score":127,"percentile":267},"2025-12-21",0.81167,{"date":269,"score":127,"percentile":270},"2025-12-22",0.81165,{"date":272,"score":127,"percentile":273},"2025-12-23",0.81168,{"date":275,"score":127,"percentile":276},"2025-12-24",0.8118,{"date":278,"score":127,"percentile":279},"2025-12-25",0.81195,{"date":281,"score":127,"percentile":282},"2025-12-26",0.81196,{"date":284,"score":285,"percentile":286},"2025-12-27",0.01489,0.80658,{"date":288,"score":127,"percentile":289},"2025-12-28",0.81183,{"date":291,"score":292,"percentile":293},"2025-12-29",0.02141,0.83737,{"date":295,"score":292,"percentile":296},"2025-12-30",0.83743,{"date":298,"score":292,"percentile":299},"2025-12-31",0.83756,{"date":301,"score":302,"percentile":303},"2026-01-01",0.01761,0.8223,{"date":305,"score":302,"percentile":306},"2026-01-02",0.82225,{"date":308,"score":302,"percentile":309},"2026-01-03",0.8222,{"date":311,"score":292,"percentile":296},"2026-01-04",{"date":313,"score":292,"percentile":293},"2026-01-05",{"date":315,"score":292,"percentile":296},"2026-01-06",{"date":317,"score":292,"percentile":296},"2026-01-07",{"date":319,"score":292,"percentile":320},"2026-01-08",0.83751,{"date":322,"score":292,"percentile":323},"2026-01-09",0.83752,{"date":325,"score":292,"percentile":326},"2026-01-10",0.83749,{"date":328,"score":292,"percentile":329},"2026-01-11",0.83748,{"date":331,"score":292,"percentile":296},"2026-01-12",{"date":333,"score":292,"percentile":334},"2026-01-13",0.8374,{"date":336,"score":292,"percentile":337},"2026-01-14",0.83761,{"date":339,"score":292,"percentile":340},"2026-01-15",0.8376,{"date":342,"score":292,"percentile":343},"2026-01-16",0.83769,{"date":345,"score":292,"percentile":346},"2026-01-17",0.83773,{"date":348,"score":292,"percentile":349},"2026-01-18",0.83765,{"date":351,"score":292,"percentile":337},"2026-01-19",{"date":353,"score":292,"percentile":354},"2026-01-20",0.83763,{"date":356,"score":292,"percentile":357},"2026-01-21",0.83767,{"date":359,"score":292,"percentile":346},"2026-01-22",{"date":361,"score":292,"percentile":362},"2026-01-23",0.83798,{"date":364,"score":292,"percentile":365},"2026-01-24",0.83807,{"date":367,"score":292,"percentile":368},"2026-01-25",0.83802,{"date":370,"score":292,"percentile":371},"2026-01-26",0.83801,{"date":373,"score":292,"percentile":368},"2026-01-27",{"date":375,"score":292,"percentile":376},"2026-01-28",0.83806,{"date":378,"score":292,"percentile":365},"2026-01-29",{"date":380,"score":292,"percentile":381},"2026-01-30",0.8381,{"date":383,"score":292,"percentile":384},"2026-01-31",0.83816,{"date":386,"score":302,"percentile":387},"2026-02-01",0.82281,[389,396],{"source":80,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":390,"cvss_v4_0":9},{"baseScore":391,"baseSeverity":392,"vectorString":393,"impactScore":394,"exploitabilityScore":395},4,"MEDIUM","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",2.3,5.6,{"source":74,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":397,"cvss_v4_0":9},{"baseScore":72,"baseSeverity":398,"vectorString":75,"impactScore":399,"exploitabilityScore":400},"HIGH",6,10,[402,414],{"ecosystem":9,"name":403,"vendor":403,"product":403,"cpe_part":404,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":405},"axios","a",[406],{"version":407,"is_range":408,"range_type":409,"version_start":410,"version_start_type":411,"version_end":412,"version_end_type":413,"fixed_in":9},"gte1.3.2_lt1.7.4",true,"cpe","1.3.2","including","1.7.4","excluding",{"ecosystem":415,"name":403,"vendor":415,"product":403,"cpe_part":9,"purl_type":416,"purl_namespace":9,"purl_name":403,"source":9,"versions":417},"Npm","npm",[418],{"version":419,"is_range":408,"range_type":420,"version_start":410,"version_start_type":411,"version_end":412,"version_end_type":413,"fixed_in":9},"gte1_3_2_lt1_7_4","semver"]