CVE-2026-67316

🗓️ 01 Aug 2026 12:22:18Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 102 Views🌐 WEB

Axios prototype pollution via bodyless methods enables attacker data and proxy or serializer leakage.

Reporter	Title	Published	Views	Family All 238
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been found in IBM Security Verify Information Queue	6 Aug 202607:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities	6 Aug 202622:32	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in axios	2 Sep 202619:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in axios affect Content Cortex for Microsoft Office	28 Aug 202616:36	–	ibm
ATTACKERKB	CVE-2026-67316	1 Aug 202612:22	–	attackerkb
BDU FSTEC	The vulnerability of the axios library lies in the uncontrolled modification of object prototype attributes, which allows attackers to compromise the integrity of the protected information.	3 Aug 202600:00	–	bdu_fstec
Chainguard	CVE-2026-67316 vulnerabilities	1 Sep 202620:24	–	cgr
Cvelist	CVE-2026-67316 axios before 1.18.0 Prototype Pollution via bodyless methods	1 Aug 202612:22	–	cvelist
Debian CVE	CVE-2026-67316	1 Aug 202612:22	–	debiancve
EUVD	EUVD-2026-51827	1 Aug 202612:22	–	euvd

NVD

Vulners

CNA

Node

axios axiosRange<0.33.0node.js

axios axiosRange1.0.0–1.18.0node.js

[
  {
    "vendor": "axios",
    "product": "axios",
    "defaultStatus": "unaffected",
    "packageURL": "pkg:npm/axios",
    "versions": [
      {
        "version": "1.0.0",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "1.18.0"
      },
      {
        "version": "1.18.0",
        "status": "unaffected",
        "versionType": "semver"
      }
    ]
  },
  {
    "vendor": "axios",
    "product": "axios",
    "defaultStatus": "unaffected",
    "packageURL": "pkg:npm/axios",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "0.33.0"
      },
      {
        "version": "0.33.0",
        "status": "unaffected",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/axios-before-prototype-pollution-via-bodyless-methods
github	www.github.com/axios/axios/security/advisories/GHSA-mmx7-hfxf-jppx

Parameter	Position	Path	Description	CWE
config	path	lib/adapters/http.js	Low-level gadget: reading polluted config.data in bodyless axios methods can send attacker-controlled body or proxy/serialization values.	CWE-1321
config.data	path	lib/adapters/http.js	Low-level gadget: reading polluted config.data in bodyless axios methods can send attacker-controlled body or proxy/serialization values.	CWE-1321
proxy	path	lib/adapters/http.js	Low-level gadget: reading polluted config.data in bodyless axios methods can send attacker-controlled body or proxy/serialization values.	CWE-1321
paramsSerializer	path	lib/adapters/http.js	Low-level gadget: reading polluted config.data in bodyless axios methods can send attacker-controlled body or proxy/serialization values.	CWE-1321
config	path	unsafe/helpers/resolveConfig.js	Low-level gadget: polluted proxy/paramsSerializer values can be inherited when resolving config via helper paths.	CWE-1321
proxy	path	unsafe/helpers/resolveConfig.js	Low-level gadget: polluted proxy/paramsSerializer values can be inherited when resolving config via helper paths.	CWE-1321
paramsSerializer	path	unsafe/helpers/resolveConfig.js	Low-level gadget: polluted proxy/paramsSerializer values can be inherited when resolving config via helper paths.	CWE-1321

01 Sep 2026 15:40Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.17.4

CVSS 46.3

EPSS0.00354

SSVC

CWE-1321