ROOT-APP-NPM-CVE-2026-44494 CVE-2026-44494 in @rootio/axios - Patched by Root

Root has patched CVE-2026-44494 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-44494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution Gadget...

CVE-2026-44494 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, opensearch-dashboards, kubeflow-centraldashboard, lerna, prism, kubeflow-katib, langfuse, nextcloud-server...

CVE-2026-44494 vulnerabilities

Vulnerabilities for packages: lerna, wazuh-dashboard, nextcloud-server, gitlab-rails-ce, kubeflow-katib, kubeflow-centraldashboard, wazuh-dashboard-fips, langfuse, librechat, jitsucom-jitsu, prism, opensearch-dashboards, opensearch-dashboards-fips, kibana, gitlab-rails-ce-fips, langfuse-fips, awx...

0xpay-cc-sdk (>=0.0.8 <=0.1.0), 0xtrails (>=0.0.0-20251106131028 <=0.16.2) +7274 more potentially affected by CVE-2026-44494 via axios (>=1.0.0 <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =0.0.0-20251106131028, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.0.2-beta.0, =8.0.5, =6.1.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.0.1-alpha.3, =0.0.1-alpha.4 and more Source cves: CVE-2026-44494 Source advisory: OSV:GHSA-35JP-WW65-95WH...

CVE-2026-44494

creationtimestamp| type| source ---|---|--- 2026-05-29 06:49:56+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh 2026-06-03 14:43:57+00:00| published-proof-of-concept| https://t.me/bdufstecru/3216 2026-06-11 18:01:07+00:00| seen|...