StackRadar

CVE-2026-101908

Medium

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
179
of 17,966 indexed, latest versions
Container images
165
deployed by those charts
Fix available
1 of 1
affected package

Axios: Prototype pollution gadget in fetch adapter can alter outbound requests

Carried by container images the latest versions of 179 of 17,966 indexed charts deploy, on 165 images.

Affected packageAffected versionsFixed inImages
axiosnpm1.7.2, 1.7.3, 1.7.4, 1.7.5+25 more1.20.0165
OSV records
GHSA-vh66-26gq-q6x8

Charts affected

179 by stars
ChartLatestAffected imagesRadar Score
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
axios@1.7.5
1.20.0

Open the chart page →

12,791
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
infisical/infisical:latest3365445909be
axios@1.18.1
1.20.0

Open the chart page →

3,223
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
axios@1.16.0
1.20.0

Open the chart page →

4,025
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
axios@1.8.2
1.20.0

Open the chart page →

6,583
shinsei-managerjtektVerified publisher0.2.02 of 8See more

shinsei-manager jtekt 0.2.0

2 of the 8 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
axios@1.7.8
1.20.0
moreillon/group-manager:latest3caa8f710ee0
axios@1.15.0
1.20.0

Open the chart page →

68,380
actual-budgetk8s-chartsVerified publisher0.2.31 of 1See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
actualbudget/actual-server:25.3.158fecd9088b7
axios@1.7.9
1.20.0

Open the chart page →

2,895
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
axios@1.16.0
1.20.0

Open the chart page →

3,672
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
axios@1.8.3
1.20.0

Open the chart page →

5,677
cdashkitwareVerified publisher0.20.01 of 3See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
kitware/cdash:v5.4.0da5abe941506
axios@1.19.0
1.20.0

Open the chart page →

12,503
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
axios@1.12.2
1.20.0

Open the chart page →

1,763
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
axios@1.7.2
1.20.0

Open the chart page →

9,827
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
axios@1.13.2
1.20.0

Open the chart page →

3,711
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
axios@1.16.0
1.20.0

Open the chart page →

3,254
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
axios@1.15.0
1.20.0

Open the chart page →

2,900
kube-mailkubernetes-replicator0.11.11 of 3See more

kube-mail kubernetes-replicator 0.11.1

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-mail:latest04f1099241fc
axios@1.10.0
1.20.0

Open the chart page →

2,845
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
axios@1.10.0
1.20.0

Open the chart page →

3,847
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
axios@1.16.0
1.20.0

Open the chart page →

2,086
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
axios@1.15.0
1.20.0

Open the chart page →

1,778
wudm0sh1-helm-charts0.2.01 of 1See more

wud m0sh1-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
getwud/wud:8.1.1b1cd01c43839
axios@1.7.9
1.20.0

Open the chart page →

6,936
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
laituanmanh/websearch-crawler:latest63b6da557c71
axios@1.8.4
1.20.0

Open the chart page →

10,476
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
axios@1.8.2
1.20.0

Open the chart page →

10,709
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
axios@1.10.0
1.20.0

Open the chart page →

116,845
bofmojaloop5.1.61 of 1See more

bof mojaloop 5.1.6

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
axios@1.13.0
1.20.0

Open the chart page →

2,818
finance-portalmojaloop5.1.43 of 11See more

finance-portal mojaloop 5.1.4

3 of the 11 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
axios@1.11.0
1.20.0
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
axios@1.8.4
1.20.0
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
axios@1.9.0
1.20.0

Open the chart page →

16,603
reporting-events-processor-svcmojaloop3.5.31 of 1See more

reporting-events-processor-svc mojaloop 3.5.3

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
axios@1.11.0
1.20.0

Open the chart page →

2,943
reporting-hub-bop-api-svcmojaloop4.1.31 of 1See more

reporting-hub-bop-api-svc mojaloop 4.1.3

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
axios@1.8.4
1.20.0

Open the chart page →

1,794
reporting-hub-bop-experience-api-svcmojaloop1.0.31 of 1See more

reporting-hub-bop-experience-api-svc mojaloop 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
axios@1.9.0
1.20.0

Open the chart page →

2,839
security-role-perm-operator-svcmojaloop3.0.01 of 1See more

security-role-perm-operator-svc mojaloop 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
axios@1.13.0
1.20.0

Open the chart page →

2,818
camera-viewermoreillonVerified publisher0.2.11 of 4See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
moreillon/camera-proxy:latestce60056b50c2
axios@1.7.7
1.20.0

Open the chart page →

12,447
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
axios@1.13.2
1.20.0

Open the chart page →

5,552
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
axios@1.18.0
1.20.0

Open the chart page →

1,595
bluesky-pdsnerkho-helm-charts0.4.21 of 1See more

bluesky-pds nerkho-helm-charts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
axios@1.13.2
1.20.0

Open the chart page →

2,649
nostreamnostream0.1.01 of 1See more

nostream nostream 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/cameri/nostream:mainc134ac2fa289
axios@1.18.0
1.20.0

Open the chart page →

717
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
axios@1.7.7
1.20.0

Open the chart page →

4,200
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
axios@1.18.0
1.20.0

Open the chart page →

1,595
console-apiovrclk-20.1.11 of 1See more

console-api ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/akash-network/console-api:2.64.0ba359097329d
axios@1.7.7
1.20.0

Open the chart page →

3,954
console-webovrclk-20.1.11 of 1See more

console-web ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/akash-network/deploy-web:2.46.0ac540172c120
axios@1.7.7
1.20.0

Open the chart page →

3,032
provider-consoleovrclk-20.1.01 of 1See more

provider-console ovrclk-2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider-console:1.0.04d4c19a8d3ff
axios@1.7.7
1.20.0

Open the chart page →

2,561
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
mishtinetwork/operator:latestbb3fe67a5f7c
axios@1.7.2
1.20.0

Open the chart page →

4,465
ungatep2p-avs0.1.01 of 3See more

ungate p2p-avs 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
axios@1.7.2
1.20.0

Open the chart page →

29,482
portalplatform-mesh-portal0.21.11 of 1See more

portal platform-mesh-portal 0.21.1

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/portal:v0.27.16a7ecd5a0dc2
axios@1.18.0
1.20.0

Open the chart page →

330
prismeai-coreprismeai1.12.31 of 7See more

prismeai-core prismeai 1.12.3

1 of the 7 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prodf8474a665b11
axios@1.19.0
1.20.0

Open the chart page →

4,859
readability-js-serverreadability-js-server0.1.01 of 1See more

readability-js-server readability-js-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
phpdockerio/readability-js-server:1.8.0ea8354b42600
axios@1.13.2
1.20.0

Open the chart page →

2,085
recipe-apprecipe-app0.1.01 of 2See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
axios@1.7.7
1.20.0

Open the chart page →

4,013
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
axios@1.8.4
1.20.0

Open the chart page →

5,273
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
axios@1.16.0
1.20.0

Open the chart page →

1,337
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
axios@1.11.0
1.20.0

Open the chart page →

5,320
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
axios@1.13.6
1.20.0

Open the chart page →

72,366
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
axios@1.7.2
1.20.0

Open the chart page →

20,611
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-101908.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
axios@1.7.2
1.20.0

Open the chart page →

17,188

Container images carrying it

165 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
decisionrules/server:latest6a8f32aa11bc
axios@1.19.0
1.20.0
4
redis/redisinsight:3.8:latestb5e19ee240ab
axios@1.16.0
1.20.0
4
opensearchproject/opensearch-dashboards:3.9.04bdb8ded547c
axios@1.18.1
1.20.0
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
axios@1.13.6
1.20.0
3
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
axios@1.19.0
1.20.0
3
actualbudget/actual-server:26.9.0552beab3dec8
axios@1.18.1
1.20.0
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
axios@1.7.2
1.20.0
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
axios@1.7.5
1.20.0
2
library/ghost:6.65.090592b712b6b
axios@1.18.1
1.20.0
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
axios@1.11.0
1.20.0
2
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
axios@1.8.4
1.20.0
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
axios@1.9.0
1.20.0
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
axios@1.13.0
1.20.0
2
n8nio/n8n:2.36.714c4285bc303
axios@1.18.0
1.20.0
2
nodered/node-red:5.0.7:latesta649dd711d55
axios@1.19.0
1.20.0
2
rajnandan1/kener:3.2.1930407afca731
axios@1.8.3
1.20.0
2
requarks/wiki:2:latest68f0d1848261
axios@1.15.2
1.20.0
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
axios@1.16.0
1.20.0
2
ghcr.io/seerr-team/seerr:latest:v3.4.1f4768de5f616
axios@1.15.0
1.20.0
2
activepieces/activepieces:0.91.058414dfc94c4
axios@1.18.0
1.20.0
1
actualbudget/actual-server:25.3.158fecd9088b7
axios@1.7.9
1.20.0
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
axios@1.7.4
1.20.0
1
alazidis/stornx:1.1.1602d4f7f090c
axios@1.9.0
1.20.0
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
axios@1.7.7
1.20.0
1
automatischio/automatisch:0.15.03bace7a12d5f
axios@1.9.0
1.20.0
1
baserow/baserow:1.30.1df0c42eb67e8
axios@1.7.7
1.20.0
1
baserow/web-frontend:2.3.3566d24c7d9f5
axios@1.18.0
1.20.0
1
budibase/apps:3.41.344fe6feab985
axios@1.15.2
1.20.0
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
axios@1.7.4
1.20.0
1
chainsafe/lodestar:latestd717e4193699
axios@1.13.3
1.20.0
1
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
axios@1.13.2
1.20.0
1
continuoussecuritytooling/keycloak-reporting-cli:1.3.3f04ecefab64e
axios@1.19.0
1.20.0
1
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
axios@1.8.3
1.20.0
1
cryptexlabs/authf:0.12.11189c07411d7c
axios@1.7.7
1.20.0
1
cyfershepard/jellystat:1.1.12e61c759ec706
axios@1.17.0
1.20.0
1
dbgate/dbgate:7.2.0-alpine287077002446
axios@1.17.0
1.20.0
1
dbgate/dbgate:7.2.3f2dc7423ea88
axios@1.18.1
1.20.0
1
directus/directus:12.0.29c8470ea465c
axios@1.16.1
1.20.0
1
directus/directus:11.1.0e3c8bb975350
axios@1.7.3
1.20.0
1
docmost/docmost:0.96.0b56947fcfd08
axios@1.18.1
1.20.0
1
eclipseaerios/benchmarking-tool:1.0.0a4b4c2e7fe62
axios@1.7.7
1.20.0
1
eclipseaerios/self-orchestrator:1.2.08b123bec5679
axios@1.13.2
1.20.0
1
evershop/evershop:latestd0823576f91b
axios@1.19.0
1.20.0
1
evoapicloud/evolution-api:latest966625532d90
axios@1.13.2
1.20.0
1
f3ktech/recaptcha-v3-verifier:1.1.048e78987cf91
axios@1.13.2
1.20.0
1
fallenbagel/jellyseerr:latest4538137bc5af
axios@1.10.0
1.20.0
1
flanksource/incident-manager-ui:v1.4.320d952c2a774a2
axios@1.18.1
1.20.0
1
fosrl/pangolin:1.13.0c32ad797ab96
axios@1.13.2
1.20.0
1
getwud/wud:8.1.1b1cd01c43839
axios@1.7.9
1.20.0
1
growthbook/growthbook:5.1.0c8a124f55dca
axios@1.18.1
1.20.0
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.