StackRadar

CVE-2026-101908

Medium

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
179
of 17,966 indexed, latest versions
Container images
165
deployed by those charts
Fix available
1 of 1
affected package

Axios: Prototype pollution gadget in fetch adapter can alter outbound requests

Carried by container images the latest versions of 179 of 17,966 indexed charts deploy, on 165 images.

Affected packageAffected versionsFixed inImages
axiosnpm1.7.2, 1.7.3, 1.7.4, 1.7.5+25 more1.20.0165
OSV records
GHSA-vh66-26gq-q6x8

Charts affected

179 by stars
ChartLatestAffected imagesRadar Score
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
axios@1.16.1
1.20.0

Open the chart page →

3,221
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
growthbook/growthbook:latestcbf1bc59e9a9
axios@1.18.1
1.20.0

Open the chart page →

1,575
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
axios@1.15.2
1.20.0

Open the chart page →

34,115
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
axios@1.15.1
1.20.0

Open the chart page →

6,245
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
alazidis/stornx:1.1.1602d4f7f090c
axios@1.9.0
1.20.0

Open the chart page →

12,480
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
axios@1.7.7
1.20.0

Open the chart page →

16,097
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
axios@1.7.5
1.20.0

Open the chart page →

13,560
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
axios@1.15.2
1.20.0

Open the chart page →

4,240
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
axios@1.11.0
1.20.0

Open the chart page →

9,747
activepiecesadnoctemVerified publisher0.6.01 of 1See more

activepieces adnoctem 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
activepieces/activepieces:0.91.058414dfc94c4
axios@1.18.0
1.20.0

Open the chart page →

1,533
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
axios@1.18.0
1.20.0

Open the chart page →

4,474
outlineadnoctemVerified publisher0.1.21 of 1See more

outline adnoctem 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
outlinewiki/outline:1.10.1832051f039b4
axios@1.18.1
1.20.0

Open the chart page →

1,875
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
axios@1.7.4
1.20.0

Open the chart page →

5,273
alluredeckalluredeckVerified publisher0.24.01 of 2See more

alluredeck alluredeck 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
axios@1.18.1
1.20.0

Open the chart page →

1,583
platform-uiappscodeVerified publisher2026.9.111 of 1See more

platform-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/appscode/platform-ui:2.5.0c27cafe398c2
axios@1.15.0
1.20.0

Open the chart page →

751
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
axios@1.13.5
1.20.0

Open the chart page →

2,398
ghostchart-ghost0.1.61 of 2See more

ghost chart-ghost 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
library/ghost:6.65.0-alpine3.23fea3264f902e
axios@1.18.1
1.20.0

Open the chart page →

1,440
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad3 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

3 of the 6 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
axios@1.7.8
1.20.0
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
axios@1.12.0
1.20.0
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
axios@1.12.0
1.20.0

Open the chart page →

19,655
codiac-cluster-agent-chartcodiac-cluster-agent1.0.381 of 1See more

codiac-cluster-agent-chart codiac-cluster-agent 1.0.38

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
axios@1.13.2
1.20.0

Open the chart page →

1,839
cors-proxycors-proxyVerified publisher1.2.01 of 1See more

cors-proxy cors-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
axios@1.12.2
1.20.0

Open the chart page →

1,785
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
axios@1.8.3
1.20.0

Open the chart page →

9,116
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
axios@1.7.7
1.20.0

Open the chart page →

4,038
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
axios@1.16.0
1.20.0

Open the chart page →

23,711
dbgatedbgate-helm-chartVerified publisher0.1.81 of 1See more

dbgate dbgate-helm-chart 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
dbgate/dbgate:7.2.3f2dc7423ea88
axios@1.18.1
1.20.0

Open the chart page →

1,796
decisionrules-aksdecisionrules-aksVerified publisher0.2.01 of 2See more

decisionrules-aks decisionrules-aks 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
axios@1.19.0
1.20.0

Open the chart page →

584
decisionrules-eksdecisionrules-eksVerified publisher0.3.01 of 2See more

decisionrules-eks decisionrules-eks 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
axios@1.19.0
1.20.0

Open the chart page →

584
decisionrules-ingressdecisionrules-ingressVerified publisher0.2.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
axios@1.19.0
1.20.0

Open the chart page →

584
decisionrules-ocpdecisionrules-ocpVerified publisher0.1.01 of 4See more

decisionrules-ocp decisionrules-ocp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
axios@1.19.0
1.20.0

Open the chart page →

2,136
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
axios@1.13.6
1.20.0

Open the chart page →

72,366
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
axios@1.13.6
1.20.0

Open the chart page →

72,366
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
axios@1.7.3
1.20.0

Open the chart page →

4,892
node-reddjdl-charts0.33.01 of 1See more

node-red djdl-charts 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
nodered/node-red:latesta649dd711d55
axios@1.19.0
1.20.0

Open the chart page →

383
benchmarking-tooleclipse-aeriosVerified publisher1.0.01 of 1See more

benchmarking-tool eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
eclipseaerios/benchmarking-tool:1.0.0a4b4c2e7fe62
axios@1.7.7
1.20.0

Open the chart page →

851
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
axios@1.13.2
1.20.0

Open the chart page →

2,702
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
axios@1.19.0
1.20.0

Open the chart page →

1,323
azuriteemberstackVerified publisher1.0.221 of 1See more

azurite emberstack 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
axios@1.19.0
1.20.0

Open the chart page →

626
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
axios@1.15.0
1.20.0

Open the chart page →

2,082
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
chainsafe/lodestar:latestd717e4193699
axios@1.13.3
1.20.0

Open the chart page →

2,912
consent-managerfiware0.1.21 of 1See more

consent-manager fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
axios@1.19.0
1.20.0

Open the chart page →

2,330
flanksource-uiflanksourceVerified publisher1.4.3201 of 1See more

flanksource-ui flanksource 1.4.320

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.320d952c2a774a2
axios@1.18.1
1.20.0

Open the chart page →

2,952
mission-controlflanksourceVerified publisher0.1.3381 of 8See more

mission-control flanksource 0.1.338

1 of the 8 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
axios@1.18.1
1.20.0

Open the chart page →

9,766
qryn-helmgigapipeVerified publisher0.1.91 of 1See more

qryn-helm gigapipe 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
qxip/qryn:3.2.3977acc9c7a9fd
axios@1.7.7
1.20.0

Open the chart page →

3,368
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
axios@1.8.2
1.20.0

Open the chart page →

3,492
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
axios@1.9.0
1.20.0

Open the chart page →

4,183
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
axios@1.7.5
1.20.0

Open the chart page →

3,698
automatischhelmforgeVerified publisher1.3.81 of 4See more

automatisch helmforge 1.3.8

1 of the 4 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
axios@1.9.0
1.20.0

Open the chart page →

5,905
ghosthelmforgeVerified publisher1.2.101 of 3See more

ghost helmforge 1.2.10

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
library/ghost:6.65.090592b712b6b
axios@1.18.1
1.20.0

Open the chart page →

2,978
strapihelmforgeVerified publisher2.3.151 of 3See more

strapi helmforge 2.3.15

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.270e9143d6d92
axios@1.19.0
1.20.0

Open the chart page →

2,206
twentyhelmforgeVerified publisher1.0.31 of 5See more

twenty helmforge 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.43.0b2b662b1bef1
axios@1.19.0
1.20.0

Open the chart page →

2,763
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
axios@1.7.7
1.20.0

Open the chart page →

3,879

Container images carrying it

165 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
decisionrules/server:latest6a8f32aa11bc
axios@1.19.0
1.20.0
4
redis/redisinsight:3.8:latestb5e19ee240ab
axios@1.16.0
1.20.0
4
opensearchproject/opensearch-dashboards:3.9.04bdb8ded547c
axios@1.18.1
1.20.0
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
axios@1.13.6
1.20.0
3
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
axios@1.19.0
1.20.0
3
actualbudget/actual-server:26.9.0552beab3dec8
axios@1.18.1
1.20.0
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
axios@1.7.2
1.20.0
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
axios@1.7.5
1.20.0
2
library/ghost:6.65.090592b712b6b
axios@1.18.1
1.20.0
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
axios@1.11.0
1.20.0
2
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
axios@1.8.4
1.20.0
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
axios@1.9.0
1.20.0
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
axios@1.13.0
1.20.0
2
n8nio/n8n:2.36.714c4285bc303
axios@1.18.0
1.20.0
2
nodered/node-red:5.0.7:latesta649dd711d55
axios@1.19.0
1.20.0
2
rajnandan1/kener:3.2.1930407afca731
axios@1.8.3
1.20.0
2
requarks/wiki:2:latest68f0d1848261
axios@1.15.2
1.20.0
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
axios@1.16.0
1.20.0
2
ghcr.io/seerr-team/seerr:latest:v3.4.1f4768de5f616
axios@1.15.0
1.20.0
2
activepieces/activepieces:0.91.058414dfc94c4
axios@1.18.0
1.20.0
1
actualbudget/actual-server:25.3.158fecd9088b7
axios@1.7.9
1.20.0
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
axios@1.7.4
1.20.0
1
alazidis/stornx:1.1.1602d4f7f090c
axios@1.9.0
1.20.0
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
axios@1.7.7
1.20.0
1
automatischio/automatisch:0.15.03bace7a12d5f
axios@1.9.0
1.20.0
1
baserow/baserow:1.30.1df0c42eb67e8
axios@1.7.7
1.20.0
1
baserow/web-frontend:2.3.3566d24c7d9f5
axios@1.18.0
1.20.0
1
budibase/apps:3.41.344fe6feab985
axios@1.15.2
1.20.0
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
axios@1.7.4
1.20.0
1
chainsafe/lodestar:latestd717e4193699
axios@1.13.3
1.20.0
1
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
axios@1.13.2
1.20.0
1
continuoussecuritytooling/keycloak-reporting-cli:1.3.3f04ecefab64e
axios@1.19.0
1.20.0
1
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
axios@1.8.3
1.20.0
1
cryptexlabs/authf:0.12.11189c07411d7c
axios@1.7.7
1.20.0
1
cyfershepard/jellystat:1.1.12e61c759ec706
axios@1.17.0
1.20.0
1
dbgate/dbgate:7.2.0-alpine287077002446
axios@1.17.0
1.20.0
1
dbgate/dbgate:7.2.3f2dc7423ea88
axios@1.18.1
1.20.0
1
directus/directus:12.0.29c8470ea465c
axios@1.16.1
1.20.0
1
directus/directus:11.1.0e3c8bb975350
axios@1.7.3
1.20.0
1
docmost/docmost:0.96.0b56947fcfd08
axios@1.18.1
1.20.0
1
eclipseaerios/benchmarking-tool:1.0.0a4b4c2e7fe62
axios@1.7.7
1.20.0
1
eclipseaerios/self-orchestrator:1.2.08b123bec5679
axios@1.13.2
1.20.0
1
evershop/evershop:latestd0823576f91b
axios@1.19.0
1.20.0
1
evoapicloud/evolution-api:latest966625532d90
axios@1.13.2
1.20.0
1
f3ktech/recaptcha-v3-verifier:1.1.048e78987cf91
axios@1.13.2
1.20.0
1
fallenbagel/jellyseerr:latest4538137bc5af
axios@1.10.0
1.20.0
1
flanksource/incident-manager-ui:v1.4.320d952c2a774a2
axios@1.18.1
1.20.0
1
fosrl/pangolin:1.13.0c32ad797ab96
axios@1.13.2
1.20.0
1
getwud/wud:8.1.1b1cd01c43839
axios@1.7.9
1.20.0
1
growthbook/growthbook:5.1.0c8a124f55dca
axios@1.18.1
1.20.0
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.