Skip to content

chore(deps): bump fast-uri from 3.0.6 to 3.1.2 - #531

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/fast-uri-3.1.2
Closed

chore(deps): bump fast-uri from 3.0.6 to 3.1.2#531
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/fast-uri-3.1.2

chore(deps): bump fast-uri from 3.0.6 to 3.1.2

ad98e89
Select commit
Loading
Failed to load commit list.
Orca Security (US) / Orca Security - Vulnerabilities failed May 8, 2026 in 27s

Orca Security Scan Summary

Status Check Issues by priority
Failed Failed Vulnerabilities high 2   medium 5   low 0   info 0 View in Orca
☢️ The following Vulnerabilities (CVEs) have been detected
PACKAGE FILE CVE ID INSTALLED VERSION FIXED VERSION
critical axios ./package-lock.json CVE-2026-42043 1.15.0 1.15.1, 0.31.1 View in code
critical axios ./package-lock.json CVE-2026-42044 1.15.0 1.15.2 View in code
high axios ./package-lock.json CVE-2026-42033 1.15.0 1.15.1, 0.31.1 View in code
high axios ./package-lock.json CVE-2026-42035 1.15.0 1.15.1, 0.31.1 View in code
high axios ./package-lock.json CVE-2026-42264 1.15.0 1.15.2 View in code
high axios ./package-lock.json CVE-2026-42038 1.15.0 1.15.1, 0.31.1 View in code
high axios ./package-lock.json CVE-2026-42039 1.15.0 1.15.1, 0.31.1 View in code

Annotations

Check failure on line 2790 in package-lock.json

See this annotation in the file changed.

@orca-security-us orca-security-us / Orca Security - Vulnerabilities

[CRITICAL] axios (CVE-2026-42043) 

axios - Axios - NO_PROXY bypass via crafted URL
Severity: CRITICAL
CVSS3 Score: 10
Installed version: 1.15.0
Fixed version: 1.15.1, 0.31.1

Check failure on line 2790 in package-lock.json

See this annotation in the file changed.

@orca-security-us orca-security-us / Orca Security - Vulnerabilities

[CRITICAL] axios (CVE-2026-42044) 

Axios is a promise based HTTP client for the browser and Node.js. From ...
Severity: CRITICAL
CVSS3 Score: 9.1
Installed version: 1.15.0
Fixed version: 1.15.2

Check warning on line 2790 in package-lock.json

See this annotation in the file changed.

@orca-security-us orca-security-us / Orca Security - Vulnerabilities

[HIGH] axios (CVE-2026-42033) 

axios - Axios - HTTP Transport Hijacking via Prototype Pollution
Severity: HIGH
CVSS3 Score: 7.4
Installed version: 1.15.0
Fixed version: 1.15.1, 0.31.1

Check warning on line 2790 in package-lock.json

See this annotation in the file changed.

@orca-security-us orca-security-us / Orca Security - Vulnerabilities

[HIGH] axios (CVE-2026-42035) 

axios - Axios - Arbitrary HTTP header injection via prototype pollution
Severity: HIGH
CVSS3 Score: 7.4
Installed version: 1.15.0
Fixed version: 1.15.1, 0.31.1

Check warning on line 2790 in package-lock.json

See this annotation in the file changed.

@orca-security-us orca-security-us / Orca Security - Vulnerabilities

[HIGH] axios (CVE-2026-42264) 

Axios is a promise based HTTP client for the browser and Node.js. From ...
Severity: HIGH
CVSS3 Score: 7.4
Installed version: 1.15.0
Fixed version: 1.15.2

Check warning on line 2790 in package-lock.json

See this annotation in the file changed.

@orca-security-us orca-security-us / Orca Security - Vulnerabilities

[HIGH] axios (CVE-2026-42038) 

axios - Axios - Information disclosure due to `no_proxy` bypass
Severity: HIGH
CVSS3 Score: 7.5
Installed version: 1.15.0
Fixed version: 1.15.1, 0.31.1

Check warning on line 2790 in package-lock.json

See this annotation in the file changed.

@orca-security-us orca-security-us / Orca Security - Vulnerabilities

[HIGH] axios (CVE-2026-42039) 

axios - Node.js - Axios - Denial of Service via unbounded recursion in toFormData with deeply nested request data
Severity: HIGH
CVSS3 Score: 7.5
Installed version: 1.15.0
Fixed version: 1.15.1, 0.31.1
View more details on Orca Security (US)