TI-2026-30423 CVE-2026-42044 · GHSA-3w6x-2g7m-8v23
Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
Kiali 1.73.31 for Red Hat OpenShift Service Mesh 2.6
Released 2026-05-25 · Red Hat rating Important · View on Red Hat →
Axios is a promise based HTTP client for the browser and Node.js.
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.