IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.5Yüksek

CVE-2026-25639Axios affected by Denial of Service via __proto__ Key in mergeConfig

axios axios; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat multicluster engine for Kubernetes 2.1; Red Hat multicluster engine for Kubern… Yayım: (9 ay önce)

Açıklama

Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service. This vulnerability is fixed in versions 0.30.3 and 1.13.5.

Zayıflık türü (CWE): CWE-754CWE-1287

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
acm 2.11 —
acm 2.12 —
acm 2.13 —
acm 2.14 —
acm 2.15 —
ansible automation platform 2.5 —
ansible automation platform 2.6 —
axios axios >= 1.0.0, < 1.13.5, < 0.30.3
discovery 2 —
multicluster engine 2.10 —
multicluster engine 2.6 —
multicluster engine 2.7 —
multicluster engine 2.8 —
multicluster engine 2.9 —
network observ optr 1.11 —
openshift 4.19 —
openshift 4.20 —
openshift 4.21 —
openshift ai 2.16 —
openshift ai 2.25 —
openshift ai 3.3 —
openshift devspaces 3.27 —
openshift pipelines 1.21 —
quay 3.10 —
quay 3.12 —
quay 3.15 —
quay 3.16 —
quay 3.9 —
Red Hat Cryostat 4 —
Red Hat Gatekeeper 3 —
Red Hat Logging Subsystem for Red Hat OpenShift all versions
Red Hat Migration Toolkit for Applications 8 all versions
Red Hat multicluster engine for Kubernetes 2.1 all versions
Red Hat multicluster engine for Kubernetes 2.6 all versions
Red Hat multicluster engine for Kubernetes 2.7 all versions
Red Hat multicluster engine for Kubernetes 2.8 all versions
Red Hat multicluster engine for Kubernetes 2.9 all versions
Red Hat Network Observability (NETOBSERV) 1.11.0 all versions
Red Hat OpenShift Pipelines all versions
Red Hat OpenShift Service Mesh 3 —
Red Hat Red Hat 3scale API Management Platform 2 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 all versions
Red Hat Red Hat Advanced Cluster Security 4 —
Red Hat Red Hat Ansible Automation Platform 2 all versions
Red Hat Red Hat Ansible Automation Platform 2.5 all versions
Red Hat Red Hat Ansible Automation Platform 2.6 all versions
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 all versions
Red Hat Red Hat Developer Hub 1.8 all versions
Red Hat Red Hat Developer Hub 1.9 all versions
Red Hat Red Hat Discovery 2 all versions
Red Hat Red Hat Migration Toolkit 1.8 all versions
Red Hat Red Hat OpenShift AI 2.16 all versions
Red Hat Red Hat OpenShift AI 2.25 all versions
Red Hat Red Hat OpenShift AI 3.3 all versions
Red Hat Red Hat OpenShift Container Platform 4.19 all versions
Red Hat Red Hat OpenShift Container Platform 4.20 all versions
Red Hat Red Hat OpenShift Container Platform 4.21 all versions
Red Hat Red Hat OpenShift Dev Spaces 3.27 all versions
Red Hat Red Hat OpenShift Pipelines 1.21 all versions
Red Hat Red Hat OpenShift Service Mesh 2.6 all versions
Red Hat Red Hat OpenShift Service Mesh 3.0 all versions
Red Hat Red Hat OpenShift Service Mesh 3.1 all versions
Red Hat Red Hat OpenShift Service Mesh 3.2 all versions
Red Hat Red Hat Quay 3.10 all versions
Red Hat Red Hat Quay 3.12 all versions
Red Hat Red Hat Quay 3.15 all versions
Red Hat Red Hat Quay 3.16 all versions
Red Hat Red Hat Quay 3.9 all versions
Red Hat Red Hat Satellite 6.18 all versions
Red Hat Red Hat Trusted Artifact Signer 1.3 all versions
rhdh 1.8 —
rhdh 1.9 —
rhmt 1.8 —
satellite 6.18 —
service mesh 2.6 —
service mesh 3.0 —
service mesh 3.1 —
service mesh 3.2 —
trusted artifact signer 1.3 —

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (2)
  • cpe:2.3:a:axios:axios:*:*:*:*:*:node.js:*:* < 0.30.3
  • cpe:2.3:a:axios:axios:*:*:*:*:*:node.js:*:* ≥ 1.0.0 < 1.13.5