StackRadar

CVE-2026-101900

Medium

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
114
of 17,966 indexed, latest versions
Container images
99
deployed by those charts
Fix available
1 of 1
affected package

Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders

Carried by container images the latest versions of 114 of 17,966 indexed charts deploy, on 99 images.

Affected packageAffected versionsFixed inImages
axiosnpm1.12.0, 1.12.2, 1.13.0, 1.13.2+12 more1.20.099
OSV records
GHSA-4hqw-qxg8-jxx2

Charts affected

114 by stars
ChartLatestAffected imagesRadar Score
cors-proxycors-proxyVerified publisher1.2.01 of 1See more

cors-proxy cors-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
axios@1.12.2
1.20.0

Open the chart page →

1,785
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
axios@1.16.0
1.20.0

Open the chart page →

23,711
dbgatedbgate-helm-chartVerified publisher0.1.81 of 1See more

dbgate dbgate-helm-chart 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
dbgate/dbgate:7.2.3f2dc7423ea88
axios@1.18.1
1.20.0

Open the chart page →

1,796
decisionrules-aksdecisionrules-aksVerified publisher0.2.01 of 2See more

decisionrules-aks decisionrules-aks 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
axios@1.19.0
1.20.0

Open the chart page →

584
decisionrules-eksdecisionrules-eksVerified publisher0.3.01 of 2See more

decisionrules-eks decisionrules-eks 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
axios@1.19.0
1.20.0

Open the chart page →

584
decisionrules-ingressdecisionrules-ingressVerified publisher0.2.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
axios@1.19.0
1.20.0

Open the chart page →

584
decisionrules-ocpdecisionrules-ocpVerified publisher0.1.01 of 4See more

decisionrules-ocp decisionrules-ocp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
axios@1.19.0
1.20.0

Open the chart page →

2,136
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
axios@1.13.6
1.20.0

Open the chart page →

72,366
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
axios@1.13.6
1.20.0

Open the chart page →

72,366
node-reddjdl-charts0.33.01 of 1See more

node-red djdl-charts 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
nodered/node-red:latesta649dd711d55
axios@1.19.0
1.20.0

Open the chart page →

383
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
axios@1.13.2
1.20.0

Open the chart page →

2,702
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
axios@1.19.0
1.20.0

Open the chart page →

1,323
azuriteemberstackVerified publisher1.0.221 of 1See more

azurite emberstack 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
axios@1.19.0
1.20.0

Open the chart page →

626
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
axios@1.15.0
1.20.0

Open the chart page →

2,082
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
chainsafe/lodestar:latestd717e4193699
axios@1.13.3
1.20.0

Open the chart page →

2,912
consent-managerfiware0.1.21 of 1See more

consent-manager fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
axios@1.19.0
1.20.0

Open the chart page →

2,330
flanksource-uiflanksourceVerified publisher1.4.3201 of 1See more

flanksource-ui flanksource 1.4.320

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.320d952c2a774a2
axios@1.18.1
1.20.0

Open the chart page →

2,952
mission-controlflanksourceVerified publisher0.1.3381 of 8See more

mission-control flanksource 0.1.338

1 of the 8 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
axios@1.18.1
1.20.0

Open the chart page →

9,766
ghosthelmforgeVerified publisher1.2.101 of 3See more

ghost helmforge 1.2.10

1 of the 3 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
library/ghost:6.65.090592b712b6b
axios@1.18.1
1.20.0

Open the chart page →

2,978
strapihelmforgeVerified publisher2.3.151 of 3See more

strapi helmforge 2.3.15

1 of the 3 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.270e9143d6d92
axios@1.19.0
1.20.0

Open the chart page →

2,206
twentyhelmforgeVerified publisher1.0.31 of 5See more

twenty helmforge 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.43.0b2b662b1bef1
axios@1.19.0
1.20.0

Open the chart page →

2,763
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
infisical/infisical:latest3365445909be
axios@1.18.1
1.20.0

Open the chart page →

3,223
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
axios@1.16.0
1.20.0

Open the chart page →

4,025
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
moreillon/group-manager:latest3caa8f710ee0
axios@1.15.0
1.20.0

Open the chart page →

68,380
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
axios@1.16.0
1.20.0

Open the chart page →

3,672
cdashkitwareVerified publisher0.20.01 of 3See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
kitware/cdash:v5.4.0da5abe941506
axios@1.19.0
1.20.0

Open the chart page →

12,503
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
axios@1.12.2
1.20.0

Open the chart page →

1,763
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
axios@1.13.2
1.20.0

Open the chart page →

3,711
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
axios@1.16.0
1.20.0

Open the chart page →

3,254
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
axios@1.15.0
1.20.0

Open the chart page →

2,900
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
axios@1.16.0
1.20.0

Open the chart page →

2,086
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
axios@1.15.0
1.20.0

Open the chart page →

1,778
bofmojaloop5.1.61 of 1See more

bof mojaloop 5.1.6

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
axios@1.13.0
1.20.0

Open the chart page →

2,818
security-role-perm-operator-svcmojaloop3.0.01 of 1See more

security-role-perm-operator-svc mojaloop 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
axios@1.13.0
1.20.0

Open the chart page →

2,818
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
axios@1.13.2
1.20.0

Open the chart page →

5,552
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
axios@1.18.0
1.20.0

Open the chart page →

1,595
bluesky-pdsnerkho-helm-charts0.4.21 of 1See more

bluesky-pds nerkho-helm-charts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
axios@1.13.2
1.20.0

Open the chart page →

2,649
nostreamnostream0.1.01 of 1See more

nostream nostream 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
ghcr.io/cameri/nostream:mainc134ac2fa289
axios@1.18.0
1.20.0

Open the chart page →

717
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
axios@1.18.0
1.20.0

Open the chart page →

1,595
portalplatform-mesh-portal0.21.11 of 1See more

portal platform-mesh-portal 0.21.1

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/portal:v0.27.16a7ecd5a0dc2
axios@1.18.0
1.20.0

Open the chart page →

330
prismeai-coreprismeai1.12.31 of 7See more

prismeai-core prismeai 1.12.3

1 of the 7 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prodf8474a665b11
axios@1.19.0
1.20.0

Open the chart page →

4,859
readability-js-serverreadability-js-server0.1.01 of 1See more

readability-js-server readability-js-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
phpdockerio/readability-js-server:1.8.0ea8354b42600
axios@1.13.2
1.20.0

Open the chart page →

2,085
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
axios@1.16.0
1.20.0

Open the chart page →

1,337
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
axios@1.13.6
1.20.0

Open the chart page →

72,366
seerr-chartseerr-chartVerified publisher3.10.01 of 1See more

seerr-chart seerr-chart 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
axios@1.15.0
1.20.0

Open the chart page →

2,190
shopsyncshopsyncVerified publisher1.0.01 of 1See more

shopsync shopsync 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
shyamkrishna21/shopsync:latest3998b83def53
axios@1.13.5
1.20.0

Open the chart page →

1,507
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
axios@1.19.0
1.20.0

Open the chart page →

3,322
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
axios@1.18.1
1.20.0

Open the chart page →

3,871
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
axios@1.16.0
1.20.0

Open the chart page →

6,417
fdi-dotstatsuite-sfs-solr-statefulstatcan1.0.21 of 2See more

fdi-dotstatsuite-sfs-solr-stateful statcan 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-101900.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
axios@1.16.0
1.20.0

Open the chart page →

1,201

Container images carrying it

99 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:2.40.59f693fd55655
axios@1.18.0
1.20.0
1
n8nio/n8n:2.36.8cfe2704ff858
axios@1.18.0
1.20.0
1
n8nio/n8n:1.115.1ed16e560c40e
axios@1.12.0
1.20.0
1
n8nio/n8n:2.41.3fdce8f852ac7
axios@1.18.0
1.20.0
1
n8nio/runners:2.41.31522f8179b76
axios@1.18.0
1.20.0
1
nocodb/nocodb:0.301.5d9516f0bf546
axios@1.13.6
1.20.0
1
nodered/node-red:5.0.410f40d0a83e7
axios@1.19.0
1.20.0
1
nodered/node-red:4.1.2216e7403aab9
axios@1.12.2
1.20.0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
axios@1.16.0
1.20.0
1
oryd/kratos-selfservice-ui-node:v26.2.046a7bac1ad0c
axios@1.13.6
1.20.0
1
otwld/velero-ui:0.10.31c228d9ef71b
axios@1.18.1
1.20.0
1
outlinewiki/outline:1.10.1832051f039b4
axios@1.18.1
1.20.0
1
phpdockerio/readability-js-server:1.8.0ea8354b42600
axios@1.13.2
1.20.0
1
redis/redisinsight:3.2.055542a762210
axios@1.12.2
1.20.0
1
redis/redisinsight:3.485562d67a912
axios@1.15.0
1.20.0
1
rocketadmin/rocketadmin:1.17.710955ef540b9
axios@1.15.1
1.20.0
1
shyamkrishna21/shopsync:latest3998b83def53
axios@1.13.5
1.20.0
1
treskon/portrait-ui:DEV-lateste7970783bc8d
axios@1.15.2
1.20.0
1
twentycrm/twenty:latest:v2.41.047bcefe4e497
axios@1.19.0
1.20.0
1
twentycrm/twenty:v2.43.0b2b662b1bef1
axios@1.19.0
1.20.0
1
twentycrm/twenty:v2.22.0e7d9948bf284
axios@1.17.0
1.20.0
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
axios@1.13.6
1.20.0
1
unleashorg/unleash-server:7.5.09adb37e399ba
axios@1.13.5
1.20.0
1
veecode/devportal28d1bafed0cf
axios@1.19.0
1.20.0
1
wazuh/wazuh-dashboard:4.14.491c8d793746f
axios@1.12.2
1.20.0
1
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
axios@1.12.2
1.20.0
1
ghcr.io/appscode/platform-ui:2.5.0c27cafe398c2
axios@1.15.0
1.20.0
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
axios@1.13.5
1.20.0
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
axios@1.13.2
1.20.0
1
ghcr.io/cameri/nostream:mainc134ac2fa289
axios@1.18.0
1.20.0
1
ghcr.io/data-fair/portals:18b621866ceb2
axios@1.18.1
1.20.0
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
axios@1.12.0
1.20.0
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
axios@1.12.0
1.20.0
1
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
axios@1.12.2
1.20.0
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
axios@1.18.0
1.20.0
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
axios@1.18.1
1.20.0
1
ghcr.io/platform-mesh/portal:v0.27.16a7ecd5a0dc2
axios@1.18.0
1.20.0
1
ghcr.io/seerr-team/seerr:v3.5.027602401178d
axios@1.15.0
1.20.0
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
axios@1.15.0
1.20.0
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main06adb21bfdfc
axios@1.18.1
1.20.0
1
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
axios@1.16.0
1.20.0
1
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
axios@1.19.0
1.20.0
1
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
axios@1.18.1
1.20.0
1
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
axios@1.15.0
1.20.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest4f8c0f8a8ee0
axios@1.19.0
1.20.0
1
quay.io/wi_stefan/consent-manager:0.0.656399619568b
axios@1.19.0
1.20.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
axios@1.13.6
1.20.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
axios@1.13.6
1.20.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prodf8474a665b11
axios@1.19.0
1.20.0
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.