[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-67321":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":37,"duplicate_of":9,"upstream":67,"downstream":72,"duplicates":81,"related":84,"reserved_at":9,"published_at":88,"modified_at":89,"state":90,"summary":91,"references_raw":99,"kevs":173,"epss":174,"epss_history":177,"metrics":324,"affected":348},"CVE-2026-67321","axios versions 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 contain an incomplete depth-limit bypass in toFormData.js when serializing objects with top-level keys ending in '{}'. Attackers who control object keys and nested values passed to axios form or parameter serialization can trigger a RangeError from JSON.stringify, causing denial of service in the affected request path.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-674","Uncontrolled Recursion","The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","weakness","Draft","Class",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":24,"name":25,"techniques":26},"CAPEC-231","Oversized Serialized Data Payloads",[],[28],{"_key":29,"name":30,"source":31,"url":32,"maturity":33,"reliability_score":34,"verified":35,"type":9,"platforms":36,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_AXIOS_AXIOS","Axios","github","https://github.com/axios/axios/issues/1098","poc",0.3,false,[],[38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66],"UBUNTU-CVE-2026-67321","DEBIAN-CVE-2026-67321","GHSA-hcpx-6fm6-wx23","CGA-2v69-4295-4h8h","CGA-36q8-f434-9xh5","CGA-5669-phxj-x7v7","CGA-5pq6-g2fm-8qqj","CGA-5q93-x7gg-886j","CGA-7vrj-g7h7-94wx","CGA-8cj5-m7qc-v4wp","CGA-9p4p-x9q5-mmgv","CGA-ccvm-fxv2-wr6h","CGA-cff7-c7xf-q2wg","CGA-g4mh-vvmw-fvp2","CGA-mvxr-qw9q-m7j6","CGA-p39q-6vq2-gv88","CGA-p8f5-h974-m37g","CGA-q7wp-8xg4-xmfm","CGA-qqpv-j278-jhq5","CGA-qxgg-99vv-96mr","CGA-r6cg-5q3v-3fhv","CGA-r9rj-cvjx-rc7x","CGA-rvhx-2qc9-8p9r","CGA-v6mg-j7v8-q5m3","CGA-vg5g-9g5v-hh7p","CGA-xrmr-78p9-pf2v","CGA-hppq-44cg-q4wv","CGA-vrwp-7pv6-j32j","CGA-3w3x-76xh-x94v",[68,70],{"_key":69},"GHSA-3MCP-22MF-VRW3",{"_key":71},"GHSA-HCPX-6FM6-WX23",[73,75,77,79],{"_key":74},"OPENSUSE-SU-2026:11680-1",{"_key":76},"RHSA-2026:48758",{"_key":78},"RHSA-2026:47619",{"_key":80},"RHSA-2026:48241",[82],{"_key":83},"CVE-2026-69125",[85,86],{"_key":74},{"_key":87},"CGA-Q8CQ-VW5Q-J3XH","2026-08-01T12:22:18.177Z","2026-08-03T15:18:48.315Z","Analyzed",{"cisa_kev":35,"cisa_ransomware":35,"cisa_vendor":9,"epss_severity":92,"epss_score":93,"severity":94,"severity_score":95,"severity_version":96,"severity_source":97,"severity_vector":98,"severity_status":90},"low",0.0036,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[100,114,119,123,127,132,136,140,144,148,153,157,161,165,169],{"url":101,"sources":102,"tags":108},"https://github.com/axios/axios/security/advisories/GHSA-hcpx-6fm6-wx23",[103,97,104,105,106,107],"cve.org","osv_ubuntu","osv_npm","osv_wolfi","osv_chainguard",[109,110,111,112,113],"Vendor Advisory","REPORT","WEB","Exploit","Advisory",{"url":115,"sources":116,"tags":117},"https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-maxdepth-bypass",[103,97,104,105,106,107],[118,110,111,113],"Third Party Advisory",{"url":120,"sources":121,"tags":122},"https://ubuntu.com/security/CVE-2026-67321",[104],[110],{"url":124,"sources":125,"tags":126},"https://www.cve.org/CVERecord?id=CVE-2026-67321",[104],[110],{"url":128,"sources":129,"tags":131},"https://security-tracker.debian.org/tracker/CVE-2026-67321",[130],"osv_debian",[113],{"url":133,"sources":134,"tags":135},"https://github.com/axios/axios/pull/11000",[105,106],[111],{"url":137,"sources":138,"tags":139},"https://github.com/axios/axios/pull/11001",[105,106],[111],{"url":141,"sources":142,"tags":143},"https://github.com/axios/axios/commit/1417285c69344bbcc6420a021f67dee0c6fedb2d",[105,106],[111],{"url":145,"sources":146,"tags":147},"https://github.com/axios/axios/commit/32fc489632377d214db55bfa4e2c48486a7d7ce2",[105,106],[111],{"url":149,"sources":150,"tags":151},"https://github.com/axios/axios",[105,106],[152],"PACKAGE",{"url":154,"sources":155,"tags":156},"https://github.com/axios/axios/releases/tag/v0.33.0",[105,106],[111],{"url":158,"sources":159,"tags":160},"https://github.com/axios/axios/releases/tag/v1.18.0",[105,106],[111],{"url":162,"sources":163,"tags":164},"https://nvd.nist.gov/vuln/detail/CVE-2026-67321",[105,106,107],[113],{"url":166,"sources":167,"tags":168},"https://nvd.nist.gov/vuln/detail/CVE-2026-69125",[105,106],[113],{"url":170,"sources":171,"tags":172},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/67xxx/CVE-2026-67321.json",[107,106],[113],[],{"date":175,"score":93,"percentile":176},"2026-09-19",0.29757,[178,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323],{"date":179,"score":180,"percentile":181},"2026-08-02",0.00291,0.21389,{"date":183,"score":180,"percentile":184},"2026-08-03",0.21403,{"date":186,"score":180,"percentile":187},"2026-08-04",0.21349,{"date":189,"score":180,"percentile":190},"2026-08-05",0.21289,{"date":192,"score":180,"percentile":193},"2026-08-06",0.21302,{"date":195,"score":180,"percentile":196},"2026-08-07",0.21318,{"date":198,"score":180,"percentile":199},"2026-08-08",0.21317,{"date":201,"score":180,"percentile":202},"2026-08-09",0.21309,{"date":204,"score":180,"percentile":205},"2026-08-10",0.21323,{"date":207,"score":180,"percentile":208},"2026-08-11",0.21418,{"date":210,"score":180,"percentile":211},"2026-08-12",0.21465,{"date":213,"score":180,"percentile":214},"2026-08-13",0.21487,{"date":216,"score":180,"percentile":217},"2026-08-14",0.21514,{"date":219,"score":180,"percentile":220},"2026-08-15",0.21665,{"date":222,"score":180,"percentile":223},"2026-08-16",0.21674,{"date":225,"score":180,"percentile":226},"2026-08-17",0.21592,{"date":228,"score":180,"percentile":229},"2026-08-18",0.21612,{"date":231,"score":180,"percentile":232},"2026-08-19",0.21693,{"date":234,"score":180,"percentile":235},"2026-08-20",0.2174,{"date":237,"score":180,"percentile":238},"2026-08-21",0.21767,{"date":240,"score":180,"percentile":241},"2026-08-22",0.21775,{"date":243,"score":180,"percentile":244},"2026-08-23",0.21756,{"date":246,"score":180,"percentile":247},"2026-08-24",0.21091,{"date":249,"score":180,"percentile":250},"2026-08-25",0.21109,{"date":252,"score":180,"percentile":253},"2026-08-26",0.21179,{"date":255,"score":180,"percentile":256},"2026-08-27",0.21181,{"date":258,"score":180,"percentile":259},"2026-08-28",0.21202,{"date":261,"score":180,"percentile":262},"2026-08-29",0.2122,{"date":264,"score":180,"percentile":265},"2026-08-30",0.21252,{"date":267,"score":180,"percentile":268},"2026-08-31",0.21232,{"date":270,"score":180,"percentile":271},"2026-09-01",0.21258,{"date":273,"score":93,"percentile":274},"2026-09-02",0.2892,{"date":276,"score":93,"percentile":277},"2026-09-03",0.28933,{"date":279,"score":93,"percentile":280},"2026-09-04",0.28965,{"date":282,"score":93,"percentile":283},"2026-09-05",0.28934,{"date":285,"score":93,"percentile":286},"2026-09-06",0.29032,{"date":288,"score":93,"percentile":289},"2026-09-07",0.2904,{"date":291,"score":93,"percentile":292},"2026-09-08",0.29056,{"date":294,"score":93,"percentile":295},"2026-09-09",0.2921,{"date":297,"score":93,"percentile":298},"2026-09-10",0.29223,{"date":300,"score":93,"percentile":301},"2026-09-11",0.29246,{"date":303,"score":93,"percentile":304},"2026-09-12",0.29349,{"date":306,"score":93,"percentile":307},"2026-09-13",0.29304,{"date":309,"score":93,"percentile":310},"2026-09-14",0.29326,{"date":312,"score":93,"percentile":313},"2026-09-15",0.29392,{"date":315,"score":93,"percentile":316},"2026-09-16",0.29529,{"date":318,"score":93,"percentile":319},"2026-09-17",0.29589,{"date":321,"score":93,"percentile":322},"2026-09-18",0.29737,{"date":175,"score":93,"percentile":176},[325,330,337,340,342,344,346],{"source":103,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":326},{"baseScore":327,"baseSeverity":328,"vectorString":329,"impactScore":9,"exploitabilityScore":9},6.9,"MEDIUM","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",{"source":97,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":331,"cvss_v4_0":335},{"baseScore":95,"baseSeverity":332,"vectorString":98,"impactScore":333,"exploitabilityScore":334},"HIGH",6,10,{"baseScore":327,"baseSeverity":328,"vectorString":336,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":104,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":338,"cvss_v4_0":339},{"baseScore":95,"baseSeverity":9,"vectorString":98,"impactScore":333,"exploitabilityScore":334},{"baseScore":327,"baseSeverity":9,"vectorString":329,"impactScore":9,"exploitabilityScore":9},{"source":130,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":341,"cvss_v4_0":9},{"baseScore":95,"baseSeverity":9,"vectorString":98,"impactScore":333,"exploitabilityScore":334},{"source":105,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":343},{"baseScore":327,"baseSeverity":9,"vectorString":329,"impactScore":9,"exploitabilityScore":9},{"source":106,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":345},{"baseScore":327,"baseSeverity":9,"vectorString":329,"impactScore":9,"exploitabilityScore":9},{"source":107,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":347},{"baseScore":327,"baseSeverity":9,"vectorString":329,"impactScore":9,"exploitabilityScore":9},[349,361,367,373,379,385,391,395,401,407,413,419,425,430,433,436,439,442,445,448,451,454,457,471,484,493],{"ecosystem":350,"name":351,"vendor":352,"product":351,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":351,"source":9,"versions":354},"Chainguard","gitlab-rails-ce-19.1","chainguard","apk",[355],{"version":356,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":359,"version_end_type":360,"fixed_in":9},"lt19_1_7_r6",true,"ecosystem","19.1.7-r6","excluding",{"ecosystem":350,"name":362,"vendor":352,"product":362,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":362,"source":9,"versions":363},"gitlab-rails-ce-19.2",[364],{"version":365,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":366,"version_end_type":360,"fixed_in":9},"lt19_2_5_r2","19.2.5-r2",{"ecosystem":350,"name":368,"vendor":352,"product":368,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":368,"source":9,"versions":369},"jitsucom-jitsu-console",[370],{"version":371,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":372,"version_end_type":360,"fixed_in":9},"lt2_11_0_r30","2.11.0-r30",{"ecosystem":350,"name":374,"vendor":352,"product":374,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":374,"source":9,"versions":375},"kubeflow-centraldashboard",[376],{"version":377,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":378,"version_end_type":360,"fixed_in":9},"lt1_10_0_r26","1.10.0-r26",{"ecosystem":350,"name":380,"vendor":352,"product":380,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":380,"source":9,"versions":381},"langfuse-3",[382],{"version":383,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":384,"version_end_type":360,"fixed_in":9},"lt3_223_0_r0","3.223.0-r0",{"ecosystem":350,"name":386,"vendor":352,"product":386,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":386,"source":9,"versions":387},"langfuse-3-compat",[388],{"version":389,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":390,"version_end_type":360,"fixed_in":9},"lt3_225_7_r6","3.225.7-r6",{"ecosystem":350,"name":392,"vendor":352,"product":392,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":392,"source":9,"versions":393},"langfuse-3-worker",[394],{"version":383,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":384,"version_end_type":360,"fixed_in":9},{"ecosystem":350,"name":396,"vendor":352,"product":396,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":396,"source":9,"versions":397},"lerna",[398],{"version":399,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":400,"version_end_type":360,"fixed_in":9},"lt9_0_7_r11","9.0.7-r11",{"ecosystem":350,"name":402,"vendor":352,"product":402,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":402,"source":9,"versions":403},"nextcloud-server-32",[404],{"version":405,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":406,"version_end_type":360,"fixed_in":9},"lt32_0_12_r6","32.0.12-r6",{"ecosystem":350,"name":408,"vendor":352,"product":408,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":408,"source":9,"versions":409},"nextcloud-server-33",[410],{"version":411,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":412,"version_end_type":360,"fixed_in":9},"lt33_0_6_r8","33.0.6-r8",{"ecosystem":350,"name":414,"vendor":352,"product":414,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":414,"source":9,"versions":415},"opensearch-dashboards-3",[416],{"version":417,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":418,"version_end_type":360,"fixed_in":9},"lt3_7_0_r11","3.7.0-r11",{"ecosystem":350,"name":420,"vendor":352,"product":420,"cpe_part":9,"purl_type":353,"purl_namespace":352,"purl_name":420,"source":9,"versions":421},"prism",[422],{"version":423,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":424,"version_end_type":360,"fixed_in":9},"lt5_16_0_r1","5.16.0-r1",{"ecosystem":426,"name":368,"vendor":427,"product":368,"cpe_part":9,"purl_type":353,"purl_namespace":427,"purl_name":368,"source":9,"versions":428},"Wolfi","wolfi",[429],{"version":371,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":372,"version_end_type":360,"fixed_in":9},{"ecosystem":426,"name":374,"vendor":427,"product":374,"cpe_part":9,"purl_type":353,"purl_namespace":427,"purl_name":374,"source":9,"versions":431},[432],{"version":377,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":378,"version_end_type":360,"fixed_in":9},{"ecosystem":426,"name":380,"vendor":427,"product":380,"cpe_part":9,"purl_type":353,"purl_namespace":427,"purl_name":380,"source":9,"versions":434},[435],{"version":383,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":384,"version_end_type":360,"fixed_in":9},{"ecosystem":426,"name":386,"vendor":427,"product":386,"cpe_part":9,"purl_type":353,"purl_namespace":427,"purl_name":386,"source":9,"versions":437},[438],{"version":389,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":390,"version_end_type":360,"fixed_in":9},{"ecosystem":426,"name":392,"vendor":427,"product":392,"cpe_part":9,"purl_type":353,"purl_namespace":427,"purl_name":392,"source":9,"versions":440},[441],{"version":383,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":384,"version_end_type":360,"fixed_in":9},{"ecosystem":426,"name":396,"vendor":427,"product":396,"cpe_part":9,"purl_type":353,"purl_namespace":427,"purl_name":396,"source":9,"versions":443},[444],{"version":399,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":400,"version_end_type":360,"fixed_in":9},{"ecosystem":426,"name":402,"vendor":427,"product":402,"cpe_part":9,"purl_type":353,"purl_namespace":427,"purl_name":402,"source":9,"versions":446},[447],{"version":405,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":406,"version_end_type":360,"fixed_in":9},{"ecosystem":426,"name":408,"vendor":427,"product":408,"cpe_part":9,"purl_type":353,"purl_namespace":427,"purl_name":408,"source":9,"versions":449},[450],{"version":411,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":412,"version_end_type":360,"fixed_in":9},{"ecosystem":426,"name":414,"vendor":427,"product":414,"cpe_part":9,"purl_type":353,"purl_namespace":427,"purl_name":414,"source":9,"versions":452},[453],{"version":417,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":418,"version_end_type":360,"fixed_in":9},{"ecosystem":426,"name":420,"vendor":427,"product":420,"cpe_part":9,"purl_type":353,"purl_namespace":427,"purl_name":420,"source":9,"versions":455},[456],{"version":423,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":424,"version_end_type":360,"fixed_in":9},{"ecosystem":9,"name":458,"vendor":458,"product":458,"cpe_part":459,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":460},"axios","a",[461,467],{"version":462,"is_range":357,"range_type":463,"version_start":464,"version_start_type":465,"version_end":466,"version_end_type":360,"fixed_in":9},"gte0.31.1_lt0.33.0","cpe","0.31.1","including","0.33.0",{"version":468,"is_range":357,"range_type":463,"version_start":469,"version_start_type":465,"version_end":470,"version_end_type":360,"fixed_in":9},"gte1.15.1_lt1.18.0","1.15.1","1.18.0",{"ecosystem":472,"name":473,"vendor":474,"product":473,"cpe_part":9,"purl_type":475,"purl_namespace":474,"purl_name":473,"source":9,"versions":476},"Debian","node-axios","debian","deb",[477,479,480,481],{"version":478,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":478,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":478,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":482,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":483,"version_end_type":360,"fixed_in":9},"lt1_18_0_1","1.18.0-1",{"ecosystem":485,"name":473,"vendor":486,"product":473,"cpe_part":9,"purl_type":475,"purl_namespace":486,"purl_name":473,"source":9,"versions":487},"Ubuntu","ubuntu",[488,489,490,491,492],{"version":478,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":478,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":478,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":478,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":478,"is_range":357,"range_type":358,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":494,"name":458,"vendor":494,"product":458,"cpe_part":9,"purl_type":495,"purl_namespace":9,"purl_name":458,"source":9,"versions":496},"Npm","npm",[497,500],{"version":498,"is_range":357,"range_type":499,"version_start":464,"version_start_type":465,"version_end":466,"version_end_type":360,"fixed_in":9},"gte0_31_1_lt0_33_0","semver",{"version":501,"is_range":357,"range_type":499,"version_start":469,"version_start_type":465,"version_end":470,"version_end_type":360,"fixed_in":9},"gte1_15_1_lt1_18_0"]