CVE-2025-69202

Medium

Advisory

Published 30 Dec 2025In the index since 8 Sept 2026

axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header

Carried by container images the latest versions of 2 of 17,787 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
axios-cache-interceptornpm	1.0.1, 1.5.3	1.11.1	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 4 container images this version deploys carry CVE-2025-69202.

Container image	Digest	Package	Fixed in
directus/directus :11.1.0	e3c8bb975350	axios-cache-interceptor@1.5.3	1.11.1

4,551

1 of the 9 container images this version deploys carry CVE-2025-69202.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	axios-cache-interceptor@1.0.1	1.11.1

16,083

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
directus/directus :11.1.0	e3c8bb975350	axios-cache-interceptor@1.5.3	1.11.1	1
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	axios-cache-interceptor@1.0.1	1.11.1	1