Auth bypass in Arthurfiorette Axios-cache-interceptor

CVE-2025-69202

Axios Cache Interceptor is a cache interceptor for axios. Prior to version 1.11.1, when a server calls an upstream service using different auth tokens, axios-cache-interceptor returns incorrect cached responses, leading to authorization by…

EPSS: 0.000 (9.4th percentile) — read the EPSS interpretation.

Affected products

Arthurfiorette Axios-cache-interceptor — versions < 1.11.1

Weakness classification (CWE)

References

https://github.com/arthurfiorette/axios-cache-interceptor/security/advisories/GHSA-x4m5-4cw8-vc44 (x_refsource_CONFIRM)
https://github.com/arthurfiorette/axios-cache-interceptor/commit/49a808059dfc081b9cc23d48f243d55dfce15f01 (x_refsource_MISC)