Skip to content
Threat Feed

Product

Axios (>= 1.0.0, < 1.15.1)

1 brief RSS
high advisory

Axios HTTP Adapter Prototype Pollution Vulnerability

A prototype pollution vulnerability in the Axios HTTP adapter allows an attacker to inject arbitrary HTTP headers into outgoing requests by polluting the Object prototype with specific properties, leading to potential authentication bypass and privilege escalation.

axios +1 prototype-pollution header-injection cve-2026-42035 authentication-bypass privilege-escalation
2r 4t 1c