CVE-2026-101906 - Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location
CVE ID :CVE-2026-101906 Published : Sept. 28, 2026, 6:17 p.m. | 1 hour, 58 minutes ago Description :Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot regular expression to redirect hostnames....