Injection axios Dependency in Crowd Data Center

🗓️ 01 Aug 2026 04:32:20Reported by security-metrics-botType

Crowd Data Center 6.0.0 to 7.2.0 vulnerable to axios prototype pollution enabling MITM attacks on auth credentials.

Reporter	Title	Published	Views	Family All 329
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Axios	14 Jul 202619:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities	9 Jul 202618:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-44486, CVE-2026-44487, CVE-2026-44488, CVE-2026-44489, CVE-2026-44490, CVE-2026-44492, CVE-2026-44494, CVE-2026-44496)	24 Jul 202616:32	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	4 Sep 202622:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret	3 Aug 202611:18	–	ibm
Atlassian	Injection at axios dependency in Bamboo Data Center	11 Jun 202617:29	–	atlassian
Atlassian	Injection axios Dependency in Bitbucket Data Center	11 Jun 202617:29	–	atlassian
Atlassian	Injection axios Dependency in Confluence Data Center	11 Jul 202604:29	–	atlassian
Atlassian	Injection axios Dependency in Jira Service Management Data Center	6 Aug 202617:32	–	atlassian
Atlassian	Injection axios Dependency in Jira Software Data Center	10 Jul 202604:30	–	atlassian