CVE-2026-40175

This repository contains a functional proof-of-concept for CVE-2026-40175, demonstrating CRLF injection in Axios HTTP client leading to HTTP request smuggling and SSRF via nginx open proxy. It includes detailed technical analysis, root cause, and multiple test scenarios.

This repository provides a detailed technical analysis and mitigation guide for CVE-2026-40175, an Axios CRLF injection vulnerability leading to HTTP request smuggling and SSRF. It includes root cause analysis, patching strategies, and code examples for both source-level and runtime defenses.

This repository contains a Node.js-based scanner tool designed to detect vulnerable versions of the axios library (CVE-2026-40175) in local project directories. It provides interactive and automated patching capabilities but does not include exploit code for the vulnerability itself.

This repository provides a detailed technical analysis of CVE-2026-40175, a critical prototype pollution vulnerability in Axios versions prior to 1.15.0. It explains the escalation to RCE and cloud compromise, includes mitigation steps, and references official sources.