Cloudanix VulnDB

GHSA-43fc-jf86-j433

High · 7.5

CVSS

7.5

EPSS

—

Published

Feb 9, 2026

CISA due date

—

The record

Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig

Affected packages

Ecosystem Package Introduced Fixed
npm axios 0 0.30.3
npm axios 1.0.0 1.13.5
Chainguard jitsucom-jitsu-console 0 2.11.0-r15
Chainguard kibana-8.17 0 8.17.10-r10
Chainguard kibana-8.17-iamguarded 0 8.17.10-r10
Chainguard kibana-8.18 0 8.18.8-r10
Chainguard kibana-8.18-iamguarded 0 8.18.8-r10
Chainguard kibana-8.19 0 8.19.11-r1
Chainguard kibana-8.19-bitnami 0 8.19.11-r1
Chainguard kibana-8.19-iamguarded 0 8.19.11-r1
Chainguard kibana-9.0 0 9.0.8-r10
Chainguard kibana-9.0-bitnami 0 9.0.8-r10
Chainguard kibana-9.0-iamguarded 0 9.0.8-r10
Chainguard kibana-9.1 0 9.1.10-r5
Chainguard kibana-9.1-iamguarded 0 9.1.10-r5
Chainguard kibana-9.2 0 9.2.5-r3
Chainguard kibana-9.2-iamguarded 0 9.2.5-r3
Chainguard kibana-9.3 0 9.3.0-r1
Chainguard kibana-9.3-iamguarded 0 9.3.0-r1
Chainguard kubeflow-centraldashboard 0 1.10.0-r11
Chainguard langfuse-3-worker 0 3.153.0-r2
Chainguard langfuse-fips-2 0 2.95.12-r9
Chainguard langfuse-fips-2-worker 0 2.95.12-r9
Chainguard langfuse-fips-3-worker 0 3.153.0-r1
Chainguard lerna 0 9.0.4-r2
Chainguard librechat 0 0.8.2-r2
Chainguard opensearch-dashboards-2 0 2.19.4-r9
Chainguard opensearch-dashboards-2-fips 0 2.19.4-r9
Chainguard opensearch-dashboards-3 0 3.4.0-r3
Chainguard opensearch-dashboards-3-fips 0 3.4.0-r4
Chainguard prism 0 5.14.3-r6
Chainguard redisinsight 0 3.0.2-r2
Wolfi jitsucom-jitsu-console 0 2.11.0-r15
Wolfi kubeflow-centraldashboard 0 1.10.0-r11
Wolfi langfuse-3-worker 0 3.153.0-r2
Wolfi lerna 0 9.0.4-r2
Wolfi opensearch-dashboards-2 0 2.19.4-r9
Wolfi opensearch-dashboards-3 0 3.4.0-r3
Wolfi prism 0 5.14.3-r6

Related vulnerabilities