CVE WATCH / VULNERABILITY DETAIL
CVE-2026-101905
UNKNOWNCVSS 0NVD feed
Published 28 September 2026 · tracked since 29 September 2026
Description
Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request options without an own createConnection value. A separate same-process prototype-pollution flaw places a function on Object.prototype.createConne
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-126400 LOW 3.7
- CVE-2026-126384 HIGH 7.5
- CVE-2026-126383 HIGH 8.2
- CVE-2026-126381 MEDIUM 6.3
- CVE-2026-126380 CRITICAL 9.1
- CVE-2026-126378 CRITICAL 9.1
- CVE-2026-126377 HIGH 8.1
- CVE-2026-126374 MEDIUM 4.3
- CVE-2026-126372 HIGH 8.8
- CVE-2026-126370 HIGH 8.8