Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for June 2026.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.1-IF008. These vulnerabilities have been also adressed in 24.0.0-IF007, 25.0.0-IF005 and 25.0.1-IF001. Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the...

CVE-2026-44487

Axios Node.js HTTP adapter vulnerability: Proxy-Authorization credentials can leak to the redirected origin during specific proxy-to-direct redirects. Affected in Axios < 0.32.0 and

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.3.1 patch 2 version, which was present in different version from watson.data 2.2.2 to watsonx.dat 2.3.1 Patch 2 Vulnerability Details CVEID:CVE-2026-26007 DESCRIPTION: cryptography is a package designed to expose cryptographic...

Sean1025 YMFE YApi security vulnerability

Sean1025 YMFE YApi is an open-source application developed by Sean1025. It provides a visual interface for managing platforms. Version 1.12.0 of Sean1025 YMFE YApi contains a security vulnerability. This vulnerability stems from improper certificate verification, which may lead to the disabling o...

MAL-2023-116 Malicious code in axios-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfa011a32b794f2ee2f8c15b4e213a3034ba5c4e87e82b4df13d9e1b82cc4d10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in axios-proxy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in axios-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfa011a32b794f2ee2f8c15b4e213a3034ba5c4e87e82b4df13d9e1b82cc4d10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...