Duplicate Advisory: Axios: Prototype pollution gadgets can alter axios request construction

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mmx7-hfxf-jppx. This link is maintained to preserve external references. Original Description axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototyp...

GHSA-F2R5-PQH9-R8F8 Duplicate Advisory: Axios: Prototype pollution gadgets can alter axios request construction

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mmx7-hfxf-jppx. This link is maintained to preserve external references. Original Description axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototyp...

CVE-2026-67316: Improperly Controlled Modification of Object Prototype Attributes

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

CVE-2026-33182

Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, when building the request URL, Saloon combined the connector's base URL with the request endpoint. If the endpoint was a valid absolute URL, the code used that URL as-is and ignored the base...

CVE-2024-48548

The APK file in Cloud Smart Lock v2.0.1 has a leaked a URL that can call an API for binding physical devices. This vulnerability allows attackers to arbitrarily construct a request to use the app to bind to unknown devices by finding a valid serial number via a bruteforce attack...