This page collects WhisperX intelligence signals tagged #CVE-2026-25639. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.
一个严重的安全漏洞已在高人气 HTTP 客户端库 Axios 的 1.13.2 版本中被确认。该漏洞被标记为 CVE-2026-25639，其通用漏洞评分系统（CVSS）分数高达 7.5，属于高危级别。关键点在于，该漏洞被评估为“可被利用”，这意味着攻击者有可能在特定条件下利用此缺陷。对于依赖此版本 Axios 的 Node.js 和浏览器项目而言，这构成了直接的安全风险。 该漏洞的具体细节尚未完全公开，但已知影响 Axios 1.13.2 版本。漏洞报告明确指出，其影响路径位于 `/ui-plugins/muse-runner-ui/package.json` 文件中，表明该漏洞在特定项目配置下是“可触达的”。这意味着，如果应用...
A critical security vulnerability in the widely-used axios HTTP client library has been disclosed, exposing countless applications to potential Denial of Service (DoS) attacks. The flaw, tracked as CVE-2026-25639, resides in the library's `mergeConfig` function, which crashes with a TypeError when processing configurat...