{
  "@id": "urn:uuid:09a8b4d8-77ec-48e4-ba8e-ba787012277b",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 10,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-14T02:06:45.296491+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2019-10742 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2019-10742"
      },
      "action_statement": "Vulnerability CVE-2019-10742 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2020-28168 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2020-28168"
      },
      "action_statement": "Vulnerability CVE-2020-28168 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2021-3749 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2021-3749"
      },
      "action_statement": "Vulnerability CVE-2021-3749 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2023-45857 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2023-45857"
      },
      "action_statement": "Vulnerability CVE-2023-45857 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-39338 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2024-39338"
      },
      "action_statement": "Vulnerability CVE-2024-39338 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-27152 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2025-27152"
      },
      "action_statement": "Vulnerability CVE-2025-27152 affects version 1.3.4 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2025-54371 is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "CVE-2025-54371"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-58754 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2025-58754"
      },
      "action_statement": "Vulnerability CVE-2025-58754 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-62718 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2025-62718"
      },
      "action_statement": "Vulnerability CVE-2025-62718 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-101898 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101898"
      },
      "action_statement": "Vulnerability CVE-2026-101898 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:26:00.033918+00:00",
      "status_notes": "Vulnerability CVE-2026-101899 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101899"
      },
      "action_statement": "Vulnerability CVE-2026-101899 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:26:00.033918+00:00",
      "status_notes": "Vulnerability CVE-2026-101900 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101900"
      },
      "action_statement": "Vulnerability CVE-2026-101900 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-101901 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101901"
      },
      "action_statement": "Vulnerability CVE-2026-101901 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-30T15:22:01.103634+00:00",
      "status_notes": "Vulnerability CVE-2026-101902 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101902"
      },
      "action_statement": "Vulnerability CVE-2026-101902 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-101903 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101903"
      },
      "action_statement": "Vulnerability CVE-2026-101903 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-30T15:57:50.734473+00:00",
      "status_notes": "Vulnerability CVE-2026-101904 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101904"
      },
      "action_statement": "Vulnerability CVE-2026-101904 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:26:00.033918+00:00",
      "status_notes": "Vulnerability CVE-2026-101905 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101905"
      },
      "action_statement": "Vulnerability CVE-2026-101905 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-101906 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101906"
      },
      "action_statement": "Vulnerability CVE-2026-101906 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:26:00.033918+00:00",
      "status_notes": "Vulnerability CVE-2026-101907 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101907"
      },
      "action_statement": "Vulnerability CVE-2026-101907 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:26:00.033918+00:00",
      "status_notes": "Vulnerability CVE-2026-101908 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101908"
      },
      "action_statement": "Vulnerability CVE-2026-101908 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-101909 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-101909"
      },
      "action_statement": "Vulnerability CVE-2026-101909 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-25639 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-25639"
      },
      "action_statement": "Vulnerability CVE-2026-25639 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2026-39865 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-39865"
      },
      "action_statement": "Vulnerability CVE-2026-39865 affects version 1.3.4 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-13T22:32:00.034202+00:00",
      "status_notes": "Vulnerability CVE-2026-40175 does not affect version 1.3.4 of axios. not_affected \u2014 Axios 1.3.4 has no CR/LF check on header values. The fix, which upstream and TuxCare applied on other version branches, is not in HEAD. The default transports already reject such values before anything is written to the socket. In Node, http.request throws ERR_INVALID_CHAR. In browsers, XMLHttpRequest.setRequestHeader throws SyntaxError. So the CVE's claim that the value is written directly to ...",
      "vulnerability": {
        "name": "CVE-2026-40175"
      },
      "impact_statement": "not_affected \u2014 Axios 1.3.4 has no CR/LF check on header values. The fix, which upstream and TuxCare applied on other version branches, is not in HEAD. The default transports already reject such values before anything is written to the socket. In Node, http.request throws ERR_INVALID_CHAR. In browsers, XMLHttpRequest.setRequestHeader throws SyntaxError. So the CVE's claim that the value is written directly to ..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42033 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42033"
      },
      "action_statement": "Vulnerability CVE-2026-42033 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42034 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42034"
      },
      "action_statement": "Vulnerability CVE-2026-42034 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42035 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42035"
      },
      "action_statement": "Vulnerability CVE-2026-42035 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42036 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42036"
      },
      "action_statement": "Vulnerability CVE-2026-42036 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42037 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42037"
      },
      "action_statement": "Vulnerability CVE-2026-42037 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42038 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42038"
      },
      "action_statement": "Vulnerability CVE-2026-42038 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42039 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42039"
      },
      "action_statement": "Vulnerability CVE-2026-42039 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42040 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42040"
      },
      "action_statement": "Vulnerability CVE-2026-42040 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42041 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42041"
      },
      "action_statement": "Vulnerability CVE-2026-42041 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42042 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42042"
      },
      "action_statement": "Vulnerability CVE-2026-42042 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42043 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42043"
      },
      "action_statement": "Vulnerability CVE-2026-42043 affects version 1.3.4 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-14T01:50:10.398757+00:00",
      "status_notes": "Vulnerability CVE-2026-42044 does not affect version 1.3.4 of axios. not_affected \u2014 Axios 1.3.4 is not affected by CVE-2026-42044. The `parseReviver` option was added to axios after this version, and this version never reads it. The default transformResponse calls `JSON.parse(data)` with no reviver argument, so an inherited `Object.prototype.parseReviver` is never consulted.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-42044"
      },
      "impact_statement": "not_affected \u2014 Axios 1.3.4 is not affected by CVE-2026-42044. The `parseReviver` option was added to axios after this version, and this version never reads it. The default transformResponse calls `JSON.parse(data)` with no reviver argument, so an inherited `Object.prototype.parseReviver` is never consulted."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42264 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-42264"
      },
      "action_statement": "Vulnerability CVE-2026-42264 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-44486 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-44486"
      },
      "action_statement": "Vulnerability CVE-2026-44486 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-44487 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-44487"
      },
      "action_statement": "Vulnerability CVE-2026-44487 affects version 1.3.4 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-14T02:06:45.296491+00:00",
      "status_notes": "Vulnerability CVE-2026-44488 does not affect version 1.3.4 of axios. not_affected \u2014 Target is axios 1.3.4. The built-in fetch adapter (lib/adapters/fetch.js), which was added in 1.7.0, does not exist here. The only adapters are http and xhr. The http adapter enforces maxBodyLength and maxContentLength. The CVE concerns only the missing limit enforcement in the fetch adapter, so the vulnerable code is absent.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-44488"
      },
      "impact_statement": "not_affected \u2014 Target is axios 1.3.4. The built-in fetch adapter (lib/adapters/fetch.js), which was added in 1.7.0, does not exist here. The only adapters are http and xhr. The http adapter enforces maxBodyLength and maxContentLength. The CVE concerns only the missing limit enforcement in the fetch adapter, so the vulnerable code is absent."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2026-44489 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-44489"
      },
      "action_statement": "Vulnerability CVE-2026-44489 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-44490 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-44490"
      },
      "action_statement": "Vulnerability CVE-2026-44490 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:24:00.053852+00:00",
      "status_notes": "Vulnerability CVE-2026-44492 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-44492"
      },
      "action_statement": "Vulnerability CVE-2026-44492 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-44494 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-44494"
      },
      "action_statement": "Vulnerability CVE-2026-44494 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-44495 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-44495"
      },
      "action_statement": "Vulnerability CVE-2026-44495 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-44496 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-44496"
      },
      "action_statement": "Vulnerability CVE-2026-44496 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-67312 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67312"
      },
      "action_statement": "Vulnerability CVE-2026-67312 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-67313 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67313"
      },
      "action_statement": "Vulnerability CVE-2026-67313 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-67314 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67314"
      },
      "action_statement": "Vulnerability CVE-2026-67314 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-67315 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67315"
      },
      "action_statement": "Vulnerability CVE-2026-67315 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-67316 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67316"
      },
      "action_statement": "Vulnerability CVE-2026-67316 affects version 1.3.4 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-14T02:06:45.296491+00:00",
      "status_notes": "Vulnerability CVE-2026-67317 does not affect version 1.3.4 of axios. not_affected \u2014 axios 1.3.4 has no fetch adapter. lib/adapters contains only http.js, xhr.js and adapters.js, and the CVE says versions before the fetch adapter was introduced are not affected. The vulnerable fetch-adapter body-length logic does not exist here.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-67317"
      },
      "impact_statement": "not_affected \u2014 axios 1.3.4 has no fetch adapter. lib/adapters contains only http.js, xhr.js and adapters.js, and the CVE says versions before the fetch adapter was introduced are not affected. The vulnerable fetch-adapter body-length logic does not exist here."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-67318 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67318"
      },
      "action_statement": "Vulnerability CVE-2026-67318 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-67319 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67319"
      },
      "action_statement": "Vulnerability CVE-2026-67319 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-67320 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67320"
      },
      "action_statement": "Vulnerability CVE-2026-67320 affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability CVE-2026-67321 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "CVE-2026-67321"
      },
      "action_statement": "Vulnerability CVE-2026-67321 affects version 1.3.4 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "GHSA-38gx-cfqf-f652"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "GHSA-39j5-w47m-2gmv"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "GHSA-3mcp-22mf-vrw3"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-42h9-826w-cgv3 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "GHSA-42h9-826w-cgv3"
      },
      "action_statement": "Vulnerability GHSA-42h9-826w-cgv3 affects version 1.3.4 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-10-26T13:58:14.625260+00:00",
      "status_notes": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "GHSA-4ww2-rjh2-xpv9"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "GHSA-68jp-44vc-2x5h"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-10-26T13:58:14.625260+00:00",
      "status_notes": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "GHSA-6hqm-hm2v-3p2p"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-7q8q-rj6j-mhjq affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "GHSA-7q8q-rj6j-mhjq"
      },
      "action_statement": "Vulnerability GHSA-7q8q-rj6j-mhjq affects version 1.3.4 of axios."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-10-26T13:58:14.625260+00:00",
      "status_notes": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "GHSA-9wx3-p993-35vp"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "GHSA-f2r5-pqh9-r8f8"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-10-26T13:58:14.625260+00:00",
      "status_notes": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "GHSA-fq2j-3j99-rx65"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-11-03T07:25:00.602131+00:00",
      "status_notes": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.3.4.",
      "vulnerability": {
        "name": "GHSA-fqj3-h9pc-443h"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-mmx7-hfxf-jppx affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "GHSA-mmx7-hfxf-jppx"
      },
      "action_statement": "Vulnerability GHSA-mmx7-hfxf-jppx affects version 1.3.4 of axios."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/axios@1.3.4",
          "identifiers": {
            "purl": "pkg:npm/axios@1.3.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-pmv8-rq9r-6j72 affects version 1.3.4 of axios.",
      "vulnerability": {
        "name": "GHSA-pmv8-rq9r-6j72"
      },
      "action_statement": "Vulnerability GHSA-pmv8-rq9r-6j72 affects version 1.3.4 of axios."
    }
  ]
}