surri/audit-axios

PoC

Scan local repos for vulnerable axios versions (CVE-2026-40175) and patch interactively

view exploit source poc_in_githubauthor surripublished 2026-04-14catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-40175US	medium4.8	2.02% (81st)	Exploit	2026-04-10
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollu…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.