axios: Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking
Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking (high). GHSA-q8qp-cvcw-x6jj, CVE-2026-42264.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?