DEBIAN-CVE-2026-44489

🗓️ 11 Jun 2026 17:16:32Reported by GoogleType

osv🔗 osv.dev👁 19 Views

Axios vulnerability in 1.15.2 through before 1.16.0 enables header injection via polluted proxy fields; fixed in 1.16.0.

Reporter	Title	Published	Views	Family All 116
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026	1 Sep 202618:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in axios bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.	2 Oct 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities	9 Jul 202618:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-44486, CVE-2026-44487, CVE-2026-44488, CVE-2026-44489, CVE-2026-44490, CVE-2026-44492, CVE-2026-44494, CVE-2026-44496)	24 Jul 202616:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by multiple JavaScript Node.js vulnerabilities	10 Sep 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin:Axios Node.js HTTP Adapter Proxy Credential Leakage Vulnerability in 0.32.0 and 1.16.0	7 Oct 202617:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System	2 Oct 202613:03	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	25 Sep 202620:34	–	ibm
Chainguard	CVE-2026-44489 vulnerabilities	1 Jun 202619:18	–	cgr

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-44489

01 Oct 2026 03:03Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3

EPSS0.00305