Lucene search
+L

2 matches found

Patchstack
Patchstack
added 2026/05/05 12:21 a.m.11 views

NPM: Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy

NPM: Axios: Authentication Bypass via Prototype Pollution Gadget in validateStatus Merge Strategy vulnerability discovered by ? in WordPress Npm axios versions = 0.31.0...

6.5CVSS5.8AI score0.00611EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2026/05/05 12:21 a.m.19 views

Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy

Vulnerability Disclosure: Authentication Bypass via Prototype Pollution Gadget in validateStatus Merge Strategy Summary The Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution to silently suppress all HTTP error responses 401, 403, 500,...

8.2CVSS5.9AI score0.00611EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder