EUVD-2026-88380

Axios: Header Injection via Inherited headers After Minimal Interceptor...

AZL-105257 CVE-2026-101904 affecting package python-tensorboard 2.16.2-6

Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited Object.prototype.headers from a replacement request configuration. A separate same-process prototype-pollution flaw sets Object.prototype.headers, and trust...

CVE-2026-101904

Axios is a promise-based HTTP client for the browser and Node.js. the dispatchRequest function normalizes inherited Object.prototype.headers from a replacement request configuration. A separate same-process prototype-pollution flaw sets Object.prototype.headers, and trusted request interceptors...

PT-2026-108349

Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited Object.prototype.headers from a replacement request configuration. A separate same-process prototype-pollution flaw sets Object.prototype.headers, and trust...

PT-2026-99947

Name of the Vulnerable Software and Affected Versions Axios versions 1.0.0 through 1.19.x Description The dispatchRequest function normalizes inherited Object.prototype.headers from a replacement request configuration. When a same-process prototype pollution flaw sets Object.prototype.headers and...