A vulnerability described as problematic has been identified in Axios up to 1.13.4. Impacted is the function
JSON.parse. The manipulation results in improper check for unusual conditions.
This vulnerability is reported as CVE-2026-25639. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.