CVE-2026-44494
HighAdvisory
Published 29 May 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.010
- 61st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 159
- of 17,781 indexed, latest versions
- Container images
- 159
- deployed by those charts
- Fix available
- 1 of 1
- affected package
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
Carried by container images the latest versions of 159 of 17,781 indexed charts deploy, on 159 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| axiosnpm | 1.1.3, 1.2.1, 1.2.2, 1.2.5+38 more | 1.16.0 | 159 |
- OSV records
- GHSA-35jp-ww65-95wh
Charts affected
159 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| unleash-enterpriseunleash | 1.0.3 | 1 of 1See more | 2,028 |
| kenerunxwaresVerified publisher | 2026.2.5 | 1 of 1See more | 5,228 |
| evolution-apivcnngrVerified publisher | 1.0.0 | 1 of 5See more | 3,746 |
| homarrvhdirkVerified publisher | 0.1.5 | 1 of 1See more | 2,789 |
| sirenwateim | 1.0.2 | 1 of 1See more | 5,984 |
| wazuhwazuh-helm-eksVerified publisher | 1.2.10 | 1 of 6See more | 5,484 |
| wikiwikijs | 3.0.0 | 1 of 2See more | 5,459 |
| kibanawiremindVerified publisher | 8.5.23 | 1 of 2See more | 6,285 |
| workadventureworkadventure | 1.1.0 | 4 of 9See more | 16,083 |
Container images carrying it
159 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flanksource/ | 764c84e550db | axios | 1.16.0 | 1 |
| fosrl/ | c32ad797ab96 | axios | 1.16.0 | 1 |
| helga09/ | 7999bc8b77c0 | axios | 1.16.0 | 1 |
| hoppscotch/ | 538fe6ded4b6 | axios | 1.16.0 | 1 |
| instill/ | 4cd70e2df5c6 | axios | 1.16.0 | 1 |
| kubevious/ | 2d9ba6eb46b6 | axios | 1.16.0 | 1 |
| kubevious/ | f58226f9d84e | axios | 1.16.0 | 1 |
| kubevious/ | 99ae7a5168c2 | axios | 1.16.0 | 1 |
| kubevious/ | 0b0f4c507eb6 | axios | 1.16.0 | 1 |
| kyleslugg/ | ba8c36dfdfbd | axios | 1.16.0 | 1 |
| leonardomulticloud/ | e42a341e0299 | axios | 1.16.0 | 1 |
| library/ | 2654b1e90413 | axios | 1.16.0 | 1 |
| library/ | 83f7bf209844 | axios | 1.16.0 | 1 |
| library/ | ac533a6988ee | axios | 1.16.0 | 1 |
| library/ | 0172f1c538e7 | axios | 1.16.0 | 1 |
| library/ | 04c0fc150f3a | axios | 1.16.0 | 1 |
| linuxserver/ | 6108ed066d4a | axios | 1.16.0 | 1 |
| litlyx/ | 02225e77d316 | axios | 1.16.0 | 1 |
| lukasreining/ | 50e021c42e33 | axios | 1.16.0 | 1 |
| luligu/ | 8f97884bebc2 | axios | 1.16.0 | 1 |
| markdegroot/ | d8445f2a0de6 | axios | 1.16.0 | 1 |
| mintproject/ | 222e3b941a36 | axios | 1.16.0 | 1 |
| mishtinetwork/ | bb3fe67a5f7c | axios | 1.16.0 | 1 |
| moonrailgun/ | b528c8f8fcc4 | axios | 1.16.0 | 1 |
| moreillon/ | d7d4a5463525 | axios | 1.16.0 | 1 |
| moreillon/ | ce60056b50c2 | axios | 1.16.0 | 1 |
| moreillon/ | e8fd856e593d | axios | 1.16.0 | 1 |
| moreillon/ | 3caa8f710ee0 | axios | 1.16.0 | 1 |
| n8nio/ | 8b39ed5a2de9 | axios | 1.16.0 | 1 |
| n8nio/ | a9195bc499a3 | axios | 1.16.0 | 1 |
| n8nio/ | dd171d45102a | axios | 1.16.0 | 1 |
| neoskop/ | 7f52b5949f03 | axios | 1.16.0 | 1 |
| nightscout/ | ad29ca7a4de6 | axios | 1.16.0 | 1 |
| nightscout/ | f604dc4c03ca | axios | 1.16.0 | 1 |
| nocodb/ | 6779a4ddedf2 | axios | 1.16.0 | 1 |
| nocodb/ | d9516f0bf546 | axios | 1.16.0 | 1 |
| nodered/ | 216e7403aab9 | axios | 1.16.0 | 1 |
| nodered/ | e2632a7a35dd | axios | 1.16.0 | 1 |
| oryd/ | 46a7bac1ad0c | axios | 1.16.0 | 1 |
| oryd/ | d454c21c11bc | axios | 1.16.0 | 1 |
| outlinewiki/ | 494dfb9249a6 | axios | 1.16.0 | 1 |
| phpdockerio/ | ea8354b42600 | axios | 1.16.0 | 1 |
| qxip/ | 77acc9c7a9fd | axios | 1.16.0 | 1 |
| redis/ | 019fcf774631 | axios | 1.16.0 | 1 |
| redis/ | 55542a762210 | axios | 1.16.0 | 1 |
| redis/ | 699d341bd329 | axios | 1.16.0 | 1 |
| redis/ | 85562d67a912 | axios | 1.16.0 | 1 |
| rocketadmin/ | 10955ef540b9 | axios | 1.16.0 | 1 |
| sharanalwar/ | 5e82950b16b7 | axios | 1.16.0 | 1 |
| shyamkrishna21/ | 3998b83def53 | axios | 1.16.0 | 1 |