CYBERHAWK / CVE / CVE-2025-62718

CVE-2025-62718

Axios HTTP client

CRITICAL CVSS 9.9 vibe

The flaw

Hostname normalization bypass allows proxy evasion via localhost with trailing dot

What to do

Update to 1.15.0+ or 0.31.0+

▸ Scan my repo for CVE-2025-62718

References

In the news

First seen 2026-04-15 · Tracked by PickBits CyberHawk · Weekly CVE digest