Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 12 products
CVE-2026-44495 Prototype Pollution Gadget in Axios HTTP Client 0.19.0 to 1.15.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44495
Post summary
CVE‑2026‑44495 is a prototype‑pollution vulnerability in Axios HTTP client (v0.19.0‑1.15.1); the post merely declares its existence without providing a PoC, exploit code, or evidence of active use.
12 of 12 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | axios | axios | - | node.js | - |
| App | redhat | advanced_cluster_management_for_kubernetes | - | - | - |
| App | redhat | advanced_cluster_security | - | kubernates | - |
| App | redhat | ansible_automation_platform | 2.6 | - | - |
| App | redhat | data_grid | 8.6.2 | - | - |
| App | redhat | developer_hub | - | - | - |
| App | redhat | discovery | - | - | - |
| App | redhat | openshift_container_platform | - | - | - |
| App | redhat | openshift_dev_spaces | - | - | - |
| App | redhat | openshift_service_mesh | - | - | - |
| App | redhat | openshift_virtualization | - | - | - |
| App | redhat | quay | - | - | - |