Skip to content

[Aikido] Fix critical issue in axios via minor version upgrade from 1.12.2 to 1.15.2 in with-openfort#29

Merged
yosriady merged 1 commit into
mainfrom
fix/aikido-security-update-packages-37995233-t1o7
May 22, 2026
Merged

[Aikido] Fix critical issue in axios via minor version upgrade from 1.12.2 to 1.15.2 in with-openfort#29
yosriady merged 1 commit into
mainfrom
fix/aikido-security-update-packages-37995233-t1o7

Conversation

@aikido-autofix
Copy link
Copy Markdown
Contributor

@aikido-autofix aikido-autofix Bot commented May 22, 2026

Upgrade axios to fix prototype pollution vulnerability allowing attackers to inject malicious HTTP request configurations through Object.prototype pollution.

✅ There are no breaking changes

✅ 1 CVE resolved by this upgrade, including 1 critical 🚨 CVE

This PR will resolve the following CVEs:

Issue Severity           Description
CVE-2026-42264
🚨 CRITICAL
[axios] Prototype pollution vulnerability in HTTP adapter allows attackers to exploit five config properties (auth, baseURL, socketPath, beforeRedirect, insecureHTTPParser) without hasOwnProperty guards, enabling RCE or request manipulation when Object.prototype is polluted by other dependencies.

View with Codesmith Autofix with Codesmith
Need help on this PR? Tag @codesmith with what you need. Autofix is disabled.

@yosriady yosriady merged commit 0ce314d into main May 22, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant