PT-2025-30624 · Pypi · Axios

CVE-2025-54371 · Published 2025-07-23 · Updated 2025-08-31

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Axios (affected versions not specified)

Description A critical flaw exists in the Axios library’s handling of the form-data dependency, potentially exposing millions of users to HTTP manipulation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-54371

Affected Products

Axios

References · 6

• https://twitter.com/the_yellow_fall/status/1948646856558547210 · Twitter Post
• https://twitter.com/fridaysecurity/status/1948541466625585193 · Twitter Post
• https://twitter.com/Komodosec/status/1962169312367841478 · Twitter Post
• https://t.me/CVEtracker/28522 · Telegram Post
• https://t.me/pentestingnews/65125 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1948147258291114425 · Twitter Post