Prototype Pollution

🗓️ 20 Jul 2026 17:51:17Reported by Snyk Security DatabaseType

Axios prototype pollution in Basic auth reads prototype chain, enabling credential tampering.

Reporter	Title	Published	Views	Family All 523
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42264	29 May 202610:35	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for July 2026.	5 Aug 202610:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rhapsody Systems Engineering is vulnerable to prototype pollution abuse	28 Jul 202614:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	12 Jun 202606:40	–	ibm
IBM Security Bulletins	Security Bulletin: Unrestricted upload of file with dangerous type, improper certificate validation, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	24 Jun 202616:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Loop has multiple vulnerabilities	24 Jul 202609:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities	6 Aug 202622:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in axios	16 Sep 202619:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	27 Jul 202606:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in axios (CVE-2026-42264)	28 Sep 202607:00	–	ibm

Vulners

Node

axios axiosRange1.0.0–1.18.0

Source	Link
cwe	www.cwe.mitre.org/data/definitions/CWE-1321.html
security	www.security.snyk.io/vuln/SNYK-JS-AXIOS-18060659

20 Jul 2026 17:51Current

7.4High risk

Vulners AI Score7.4

CVSS 3.14.8 - 9.1

CVSS 46.3

EPSS0.00965

SSVC