Prototype Pollution

🗓️ 20 Jul 2026 22:25:07Reported by Snyk Security DatabaseType

Axios prototype pollution allows injecting into Object.prototype via bodyless requests or proxies.

Reporter	Title	Published	Views	Family All 556
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been found in IBM Security Verify Information Queue	6 Aug 202607:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42264	29 May 202610:35	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for July 2026.	5 Aug 202610:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rhapsody Systems Engineering is vulnerable to prototype pollution abuse	28 Jul 202614:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	12 Jun 202606:40	–	ibm
IBM Security Bulletins	Security Bulletin: Unrestricted upload of file with dangerous type, improper certificate validation, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	24 Jun 202616:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Loop has multiple vulnerabilities	24 Jul 202609:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities	6 Aug 202622:32	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in axios	2 Sep 202619:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	27 Jul 202606:00	–	ibm

Vulners

Node

axios axiosRange<0.33.0

axios axiosRange1.0.0–1.18.0

Source	Link
security	www.security.snyk.io/vuln/SNYK-JS-AXIOS-18065355
cwe	www.cwe.mitre.org/data/definitions/CWE-1321.html

05 Aug 2026 06:01Current

8.2High risk

Vulners AI Score8.2

CVSS 3.13.7 - 9.1

CVSS 46.3

EPSS0.00715

SSVC