CVE-2026-101902

🗓️ 28 Sep 2026 17:22:49Reported by MendType

mend🔗 www.mend.io👁 28 Views

Axios default-instance requests can read inherited method values from Object.prototype.

Reporter	Title	Published	Views	Family All 258
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend	21 Oct 202615:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub	3 Nov 202618:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses axios-1.18.1, source-map-js-1.2.1, qs-6.16.0, pymongo-4.17.0, moment-2.30.1, pymongo-4.18.1 and ansible-14.4.0 which are vulnerable to multiple CVE	30 Oct 202606:22	–	ibm
IBM Security Bulletins	Security Bulletin: The Hub App for IBM QRadar SIEM contains components with known vulnerabilities	27 Oct 202600:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Test Accelerator for Z is affected by multiple vulnerabilities in axios	30 Oct 202623:08	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	27 Oct 202616:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache HttpComponents Core, Apache Log4j API, and Axios in IBM Content Navigator and Content Cortex for Microsoft Office	2 Nov 202615:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities	28 Oct 202618:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	27 Oct 202617:00	–	ibm
Chainguard	CVE-2026-101902 vulnerabilities	2 Oct 202602:54	–	cgr

Vulners

Node

axios axiosRange0.19.1–0.34.0

axios axiosRange1.0.0–1.20.0

axios axiosRange0.27.2–0.34.0

Source	Link
github	www.github.com/axios/axios/releases/tag/v0.34.0
github	www.github.com/axios/axios/pull/11141
github	www.github.com/axios/axios
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-101902
github	www.github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a
github	www.github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g
github	www.github.com/axios/axios/releases/tag/v1.20.0
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101902.json

08 Oct 2026 00:07Current

5.9Medium risk

Vulners AI Score5.9

CVSS 46.9

CVSS 3.18.6

EPSS0.00414

SSVC

CWE-1321