highaxiosCVE-2026-44495
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Affected versions
>= 1.0.0, < 1.15.2, fixed in 1.15.2>= 0.19.0, < 0.31.1, fixed in 0.31.1
Published 2026-05-29. Last checked 2026-11-01. Read the source advisory