Product

IBM Observability With Instana (Agent) Build 1.0.303

1 brief RSS

IBM Instana Node.js Tracer Vulnerable to Prototype Pollution (CVE-2026-14893)

A high-severity prototype pollution vulnerability, CVE-2026-14893, exists in the IBM Instana Node.js tracer component (@instana/core version 6.2.1) affecting IBM Observability with Instana Agent builds 1.0.303 through 1.0.320, allowing an attacker to modify critical application behavior through the configuration normalization API.

IBM Observability with Instana +1 vulnerability prototype-pollution nodejs instana

1c 2i 14h ago