Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`

Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection

Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain