ROOT-APP-NPM-CVE-2026-44494 CVE-2026-44494 in axios - Patched by Root

Root has patched CVE-2026-44494 in the axios package for Root:npm. Multiple fixed versions available...

Fedora 43 : nextcloud (2026-5afe6630dc)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5afe6630dc advisory. 33.0.6 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Linux Distros Unpatched Vulnerability : CVE-2026-44494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution Gadget...

CVE-2026-44494 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, lerna, kubeflow-katib, langfuse, prism, nextcloud-server, opensearch-dashboards, kubeflow-centraldashboard...

CVE-2026-44494 vulnerabilities

Vulnerabilities for packages: kibana, kubeflow-centraldashboard, prism, jitsucom-jitsu, librechat, opensearch-dashboards-fips, redisinsight, kubeflow-katib, wazuh-dashboard-fips, langfuse-fips, unleash, wazuh-dashboard, lerna, gitlab-rails-ce-fips, opensearch-dashboards, nextcloud-server, langfus...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16256 more potentially affected by CVE-2026-44494 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44494 Source advisory: SNYK:JS-AXIOS-17111079...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16256 more potentially affected by CVE-2026-44494 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44494 Source advisory: OSV:GHSA-35JP-WW65-95WH...

CVE-2026-44494

creationtimestamp| type| source ---|---|--- 2026-05-29 06:49:56+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh 2026-06-03 14:43:57+00:00| published-proof-of-concept| https://t.me/bdufstecru/3216 2026-06-11 18:01:07+00:00| seen|...