CVE-2026-42035

Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, a prototype pollution gadget exists in the Axios HTTP adapter lib/adapters/http.js that allows an attacker to inject arbitrary HTTP headers into outgoing requests. The vulnerability exploits duck-type...

PT-2021-17874 · Arista · Arista Metamako Operating System

Name of the Vulnerable Software and Affected Versions: Arista Metamako Operating System versions 0.13 through 0.26.6 Arista Metamako Operating System versions 0.31.1 and prior Description: The issue in Arista's MOS software allows unprivileged users to gain complete access to the systems when use...