Skip to content

fix(security): Fix critical issue in axios via minor version upgrade from 1.13.5 to 1.15.0 - #3

Merged
mirooon merged 1 commit into
mainfrom
fix/aikido-security-update-packages-23167087-a3xm
Apr 14, 2026
Merged

fix(security): Fix critical issue in axios via minor version upgrade from 1.13.5 to 1.15.0#3
mirooon merged 1 commit into
mainfrom
fix/aikido-security-update-packages-23167087-a3xm

Conversation

@aikido-autofix

Copy link
Copy Markdown
Contributor

Upgrade axios to fix critical prototype pollution vulnerability that could lead to Remote Code Execution and cloud credential compromise.

✅ 1 CVE resolved by this upgrade, including 1 critical 🚨 CVE

This PR will resolve the following CVEs:

Issue Severity           Description
CVE-2026-40175
🚨 CRITICAL
[axios] A prototype pollution vulnerability in a third-party dependency can be escalated to Remote Code Execution (RCE) or cloud compromise through a specific gadget attack chain. This allows attackers to execute arbitrary code or bypass security controls like AWS IMDSv2.

@melianessa
melianessa requested a review from mirooon April 14, 2026 11:12
@melianessa

Copy link
Copy Markdown

@mirooon please take a look

@mirooon
mirooon merged commit d2f9d61 into main Apr 14, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants