aiagent-detection-rules

aiagent-detection-rules Sigma-, Splunk-, Elastic- und YARA-Erkennungsregeln für den Claude-Code-Quellcode-Leak 31. März 2026 und den gleichzeitigen npm-Lieferkettenangriff. Am 31. März 2026 hat Anthropic versehentlich eine fehlkonfigurierte Source-Map in @anthropic-ai/[email protected]...

Security Bulletin: Multiple Security Vulnerabilities in axios affect Content Cortex for Microsoft Office

Summary axios versions before 1.18.0 0.x: before 0.33.0 have multiple vulnerabilities CVSS up to 8.3, High. CVE-2026-67312/67313 are uncontrolled recursion issues in formDataToJSON that exhaust the call stack via deeply nested field names, causing denial of service. CVE-2026-67314/67316/67319 are...

CLSA-2026-1787930357 TuxCare security update for axios (13 CVEs)

TuxCare rebuilt axios to address 13 CVEs. Fixed in 0.27.2-tuxcare.5...

CLSA-2026-1787930147 TuxCare security update for axios (6 CVEs)

TuxCare rebuilt axios to address 6 CVEs. Fixed in 1.6.2-tuxcare.5...

PT-2026-86897

TuxCare rebuilt axios to address 6 CVEs. Fixed in 1.6.2-tuxcare.5...

PT-2026-86900

TuxCare rebuilt axios to address 13 CVEs. Fixed in 0.27.2-tuxcare.5...

Security Bulletin: Security Vulnerability in Axios affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-40175)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Axios Vulnerability Details CVEID:CVE-2026-40175 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific...

CLSA-2026-1787841237 TuxCare security update for axios (2 CVEs)

TuxCare rebuilt axios to address 2 CVEs. Fixed in 0.21.4-tuxcare.4...

CLSA-2026-1787828503 TuxCare security update for axios (3 CVEs)

TuxCare rebuilt axios to address 3 CVEs. Fixed in 0.19.2-tuxcare.5...

ROOT-APP-NPM-CVE-2026-39865 CVE-2026-39865 in axios - Patched by Root

Root has patched CVE-2026-39865 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-SNYK-JS-AXIOS-9403194 SNYK-JS-AXIOS-9403194 in axios - Patched by Root

Root has patched SNYK-JS-AXIOS-9403194 in the axios package for Root:npm. Multiple fixed versions available...

CLSA-2026-1787796805 TuxCare security update for axios (4 CVEs)

TuxCare rebuilt axios to address 4 CVEs. Fixed in 0.18.1-tuxcare.5...

PT-2026-86498

TuxCare rebuilt axios to address 5 CVEs. Fixed in 0.18.1-tuxcare.5...

PT-2026-86549

TuxCare rebuilt axios to address 4 CVEs. Fixed in 0.19.2-tuxcare.5...

PT-2026-86555

TuxCare rebuilt axios to address 2 CVEs. Fixed in 0.21.4-tuxcare.4...

Security Bulletin: Vulnerability in Axios affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Axios has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name

A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service DoS, where the affected browser tab may...

Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate with watsonx Assistant Cartridge version 5.4.2 Vulnerability Details CVEID:CVE-2026-35554 DESCRIPTION: A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to axios (CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037, CVE-2026-42038, CVE-2026-42039, CVE-2026-42040, CVE-2026-42041, CVE-2026-42042, CVE-2026)

Summary Axios is vulnerable to Prototype Pollution / Transport Hijacking ,HTTP Request/Response Splitting via Gadget ,NOPROXY Protection Bypass ,Denial of Service DoS via Uncontrolled Recursion ,SSRF via Incomplete Proxy Bypass ,JSON API Response Manipulation via Prototype Pollution,XSRF Token...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to axios (CVE-2025-62718, CVE-2026-40175)

Summary Axios is vulnerable to infrastructure tampering and Critical SSRF and exposure of private internal/loopback endpoints attacks. These vulnerabilities affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the browser an...