ROOT-APP-NPM-CVE-2026-42038 CVE-2026-42038 in axios - Patched by Root

🗓️ 19 Aug 2026 11:25:09Reported by GoogleType

osv

osv🔗 osv.dev👁 12 Views

Root patched the 2026-42038 vulnerability in @rootio/axios for Root npm; multiple fixed versions exist.

Reporter	Title	Published	Views	Family All 86
IBM Security Bulletins	Security Bulletin:IBM Watson Discovery Cartridge affected by vulnerabilities in axios-1.12.2.tgz	9 Jun 202615:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	12 Jun 202606:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Loop has multiple vulnerabilities	24 Jul 202609:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities reported in the axios package	27 May 202612:48	–	ibm
IBM Security Bulletins	Security Bulletin:Axios Prototype Pollution: Intercept JSON Responses or Hijack HTTP Transport	7 Aug 202610:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035	29 May 202610:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Scheduler Optimizer uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033	11 Jun 202615:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites	6 Jul 202610:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	5 May 202616:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036)	4 Jun 202615:58	–	ibm

19 Aug 2026 13:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.16.8

EPSS0.00301

rootio package axios library security vulnerability patched release fixed versions