vm2: Sandbox Escape

Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

VM2 Sandbox Breakout Through __lookupGetter__

protobufjs has an arbitrary code execution issue

@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution

Rollup 4 has Arbitrary File Write via Path Traversal

Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking

Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`

Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

protobufjs: Code injection through bytes field defaults in generated toObject code

@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

FTP Command Injection via CRLF in basic-ftp

Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

fast-uri vulnerable to host confusion via failed IDN canonicalization

undici WebSocket client vulnerable to denial of service via fragment count bypass

ws: Memory exhaustion DoS from tiny fragments and data chunks

Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Axios: Allocation of Resources Without Limits or Throttling in axios

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

ws: Uninitialized memory disclosure

xmldom: XML node injection through unvalidated processing instruction serialization

xmldom: XML injection through unvalidated DocumentType serialization

xmldom: Denial of service via uncontrolled recursion in XML serialization

xmldom: XML node injection through unvalidated comment serialization

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

path-to-regexp vulnerable to Denial of Service via sequential optional groups

undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)

Multer vulnerable to Denial of Service via uncontrolled recursion

Multer vulnerable to Denial of Service via incomplete cleanup

Multer vulnerable to Denial of Service via resource exhaustion

Koa has Host Header Injection via `ctx.hostname`

fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)

Axios affected by Denial of Service via __proto__ Key in mergeConfig

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

PostgreSQL discloses MD5-hashed passwords via covert timing channel