ROOT-APP-NPM-CVE-2026-44490 CVE-2026-44490 in axios - Patched by Root

Root has patched CVE-2026-44490 in the axios package for Root:npm. Multiple fixed versions available...

Fedora 43 : nextcloud (2026-5afe6630dc)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5afe6630dc advisory. 33.0.6 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

CVE-2026-44490

Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side prototype-pollution gadgets. When Object.prototype is polluted by an upstream dependency in the same process e.g. lodash .merge / CVE-2018-16487, axios silently picks up the...

DEBIAN-CVE-2026-44490

Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side prototype-pollution gadgets. When Object.prototype is polluted by an upstream dependency in the same process e.g. lodash .merge / CVE-2018-16487, axios silently picks up the...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16255 more potentially affected by CVE-2026-44490 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44490 Source advisory: SNYK:JS-AXIOS-17111081...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16255 more potentially affected by CVE-2026-44490 via axios (>=1.0.0, <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-44490 Source advisory: OSV:GHSA-898C-Q2CR-XWHG...

com.alilitech:boot-plus-log (>=2.1.0, <=4.0.0), com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0) +8 more potentially affected by CVE-2026-44490 via org.webjars.npm:axios (>=1.1.3, <=1.7.2)

org.webjars.npm:axios MAVEN version =1.1.3, =2.1.0, =2.0.0, =1.0.3, =1.0.0, =2.1.1, =1.0.0, =1.0.0, =2.1.3, =2.0.0, =1.0.2, =1.0.9 Source cves: CVE-2026-44490 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17111082...