{
  "@id": "urn:uuid:25ff5114-1a95-4217-91de-7a4af07f95af",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 29,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-05T11:30:36.611639+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2019-10742 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2019-10742"
      },
      "action_statement": "Vulnerability CVE-2019-10742 affects version 1.13.6 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-04T11:15:10.917209+00:00",
      "status_notes": "Vulnerability CVE-2020-28168 does not affect version 1.13.6 of axios. not_affected \u2014 CVE-2020-28168 (SSRF via proxy bypass on redirect) is NOT present in axios 1.13.6-tuxcare.2. The upstream fix (commit c7329fefc890050edd51e40e469a154d0117fc55 by Daniel Lopretto, first released in v0.21.1) was already included in the upstream 1.13.6 release that TuxCare onboarded. The fix adds a beforeRedirects.proxy callback in the setProxy function that recursively re-applies proxy configurat...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2020-28168"
      },
      "impact_statement": "not_affected \u2014 CVE-2020-28168 (SSRF via proxy bypass on redirect) is NOT present in axios 1.13.6-tuxcare.2. The upstream fix (commit c7329fefc890050edd51e40e469a154d0117fc55 by Daniel Lopretto, first released in v0.21.1) was already included in the upstream 1.13.6 release that TuxCare onboarded. The fix adds a beforeRedirects.proxy callback in the setProxy function that recursively re-applies proxy configurat..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2021-3749 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2021-3749"
      },
      "action_statement": "Vulnerability CVE-2021-3749 affects version 1.13.6 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-04T11:29:00.099932+00:00",
      "status_notes": "Vulnerability CVE-2023-45857 does not affect version 1.13.6 of axios. not_affected \u2014 CVE-2023-45857: Target axios 1.13.6-tuxcare.2 is NOT AFFECTED. The vulnerable code pattern (sending XSRF tokens to cross-origin hosts when withCredentials is enabled) was removed by upstream fix commit 96ee232b, which shipped in the upstream release before TuxCare onboarded this version. The XSRF logic is now in lib/helpers/resolveConfig.js:59-68 and restricts token transmission to same-origin ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-45857"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-45857: Target axios 1.13.6-tuxcare.2 is NOT AFFECTED. The vulnerable code pattern (sending XSRF tokens to cross-origin hosts when withCredentials is enabled) was removed by upstream fix commit 96ee232b, which shipped in the upstream release before TuxCare onboarded this version. The XSRF logic is now in lib/helpers/resolveConfig.js:59-68 and restricts token transmission to same-origin ..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2024-39338 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2024-39338"
      },
      "action_statement": "Vulnerability CVE-2024-39338 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2025-27152 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2025-27152"
      },
      "action_statement": "Vulnerability CVE-2025-27152 affects version 1.13.6 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2025-54371 is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "CVE-2025-54371"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2025-58754 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2025-58754"
      },
      "action_statement": "Vulnerability CVE-2025-58754 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2025-62718 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2025-62718"
      },
      "action_statement": "Vulnerability CVE-2025-62718 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-27T13:57:00.097060+00:00",
      "status_notes": "Vulnerability CVE-2026-101898 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-101898"
      },
      "action_statement": "Vulnerability CVE-2026-101898 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:26:00.033918+00:00",
      "status_notes": "Vulnerability CVE-2026-101899 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101899"
      },
      "action_statement": "Vulnerability CVE-2026-101899 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-27T13:57:00.097060+00:00",
      "status_notes": "Vulnerability CVE-2026-101900 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-101900"
      },
      "action_statement": "Vulnerability CVE-2026-101900 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-27T13:57:00.097060+00:00",
      "status_notes": "Vulnerability CVE-2026-101901 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-101901"
      },
      "action_statement": "Vulnerability CVE-2026-101901 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-27T13:57:00.097060+00:00",
      "status_notes": "Vulnerability CVE-2026-101902 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-101902"
      },
      "action_statement": "Vulnerability CVE-2026-101902 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-101903 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101903"
      },
      "action_statement": "Vulnerability CVE-2026-101903 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-27T13:57:00.097060+00:00",
      "status_notes": "Vulnerability CVE-2026-101904 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-101904"
      },
      "action_statement": "Vulnerability CVE-2026-101904 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:26:00.033918+00:00",
      "status_notes": "Vulnerability CVE-2026-101905 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101905"
      },
      "action_statement": "Vulnerability CVE-2026-101905 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-101906 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101906"
      },
      "action_statement": "Vulnerability CVE-2026-101906 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:26:00.033918+00:00",
      "status_notes": "Vulnerability CVE-2026-101907 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101907"
      },
      "action_statement": "Vulnerability CVE-2026-101907 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-27T13:57:00.097060+00:00",
      "status_notes": "Vulnerability CVE-2026-101908 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-101908"
      },
      "action_statement": "Vulnerability CVE-2026-101908 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-101909 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101909"
      },
      "action_statement": "Vulnerability CVE-2026-101909 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2026-25639 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-25639"
      },
      "action_statement": "Vulnerability CVE-2026-25639 affects version 1.13.6 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-04T11:49:47.810575+00:00",
      "status_notes": "Vulnerability CVE-2026-39865 does not affect version 1.13.6 of axios. not_affected \u2014 The target axios version 1.13.6 is NOT affected by CVE-2026-39865. The vulnerable HTTP/2 session cleanup pattern was fixed in upstream axios v1.13.2 (commit 12c314b6) by Dmitriy Mozgovoy. The fix restructures control flow to return immediately after removing a session from the array, preventing continued iteration over a modified array. Since the target version 1.13.6 was onboarded by TuxCare a...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-39865"
      },
      "impact_statement": "not_affected \u2014 The target axios version 1.13.6 is NOT affected by CVE-2026-39865. The vulnerable HTTP/2 session cleanup pattern was fixed in upstream axios v1.13.2 (commit 12c314b6) by Dmitriy Mozgovoy. The fix restructures control flow to return immediately after removing a session from the array, preventing continued iteration over a modified array. Since the target version 1.13.6 was onboarded by TuxCare a..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-40175 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-40175"
      },
      "action_statement": "Vulnerability CVE-2026-40175 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42033 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42033"
      },
      "action_statement": "Vulnerability CVE-2026-42033 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42034 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42034"
      },
      "action_statement": "Vulnerability CVE-2026-42034 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42035 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42035"
      },
      "action_statement": "Vulnerability CVE-2026-42035 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42036 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42036"
      },
      "action_statement": "Vulnerability CVE-2026-42036 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42037 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42037"
      },
      "action_statement": "Vulnerability CVE-2026-42037 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42038 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42038"
      },
      "action_statement": "Vulnerability CVE-2026-42038 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-42039 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42039"
      },
      "action_statement": "Vulnerability CVE-2026-42039 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42040 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42040"
      },
      "action_statement": "Vulnerability CVE-2026-42040 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42041 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42041"
      },
      "action_statement": "Vulnerability CVE-2026-42041 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42042 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42042"
      },
      "action_statement": "Vulnerability CVE-2026-42042 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42043 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42043"
      },
      "action_statement": "Vulnerability CVE-2026-42043 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:36.611639+00:00",
      "status_notes": "Vulnerability CVE-2026-42044 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42044"
      },
      "action_statement": "Vulnerability CVE-2026-42044 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-42264 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-42264"
      },
      "action_statement": "Vulnerability CVE-2026-42264 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-44486 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-44486"
      },
      "action_statement": "Vulnerability CVE-2026-44486 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-44487 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-44487"
      },
      "action_statement": "Vulnerability CVE-2026-44487 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-44488 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-44488"
      },
      "action_statement": "Vulnerability CVE-2026-44488 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2026-44489 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-44489"
      },
      "action_statement": "Vulnerability CVE-2026-44489 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-44490 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-44490"
      },
      "action_statement": "Vulnerability CVE-2026-44490 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2026-44492 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-44492"
      },
      "action_statement": "Vulnerability CVE-2026-44492 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-44494 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-44494"
      },
      "action_statement": "Vulnerability CVE-2026-44494 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-44495 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-44495"
      },
      "action_statement": "Vulnerability CVE-2026-44495 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-28T09:47:11.157571+00:00",
      "status_notes": "Vulnerability CVE-2026-44496 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-44496"
      },
      "action_statement": "Vulnerability CVE-2026-44496 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-67312 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-67312"
      },
      "action_statement": "Vulnerability CVE-2026-67312 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-67313 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-67313"
      },
      "action_statement": "Vulnerability CVE-2026-67313 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-67314 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67314"
      },
      "action_statement": "Vulnerability CVE-2026-67314 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-67315 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67315"
      },
      "action_statement": "Vulnerability CVE-2026-67315 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-67316 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-67316"
      },
      "action_statement": "Vulnerability CVE-2026-67316 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-67317 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-67317"
      },
      "action_statement": "Vulnerability CVE-2026-67317 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-67318 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-67318"
      },
      "action_statement": "Vulnerability CVE-2026-67318 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-05T11:30:27.451410+00:00",
      "status_notes": "Vulnerability CVE-2026-67319 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-67319"
      },
      "action_statement": "Vulnerability CVE-2026-67319 affects version 1.13.6 of axios, and is fixed in 1.13.6-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-67320 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67320"
      },
      "action_statement": "Vulnerability CVE-2026-67320 affects version 1.13.6 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-67321 affects version 1.13.6 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67321"
      },
      "action_statement": "Vulnerability CVE-2026-67321 affects version 1.13.6 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "GHSA-38gx-cfqf-f652"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-26T14:00:26.903551+00:00",
      "status_notes": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "GHSA-39j5-w47m-2gmv"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "GHSA-3mcp-22mf-vrw3"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-26T14:00:26.903551+00:00",
      "status_notes": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "GHSA-4ww2-rjh2-xpv9"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "GHSA-68jp-44vc-2x5h"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-26T14:00:26.903551+00:00",
      "status_notes": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "GHSA-6hqm-hm2v-3p2p"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-26T14:00:26.903551+00:00",
      "status_notes": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "GHSA-9wx3-p993-35vp"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "GHSA-f2r5-pqh9-r8f8"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-26T14:00:26.903551+00:00",
      "status_notes": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "GHSA-fq2j-3j99-rx65"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.13.6",
          "identifiers": {
            "purl": "pkg:npm/axios@1.13.6"
          }
        }
      ],
      "timestamp": "2026-10-26T14:00:26.903551+00:00",
      "status_notes": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.13.6.",
      "vulnerability": {
        "name": "GHSA-fqj3-h9pc-443h"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    }
  ]
}