highaxiosCVE-2026-101905
Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection
Affected versions
>= 1.15.2, < 1.20.0, fixed in 1.20.0
Published 2026-09-30. Last checked 2026-11-01. Read the source advisory