Debian/node-axios: low 3.7
axios before 0.33.0 (and 1.x before 1.18.0) can consume inherited properties from nested request option objects when the JavaScript process's Object.prototype has already been polluted by another comp
Action: Upgrade node-axios to 1.18.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.18.0-1 | - |
Fixed versions
| 1.18.0-1 |
Sources
- osv: DEBIAN-CVE-2026-67319#Debian:14/node-axios
- https://security-tracker.debian.org/tracker/CVE-2026-67319
published · modified · JSON