CVE-2026-67316
CVE-2026-67316: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityLow3.7
Low [CVE-2026-67316] Prototype Pollution allows unauthorized data transmission and network redirection
CVE-2026-67316Source published Source updated
axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases (axios.get(), axios.delete(), axios.head(), axios.options()), inherited data is read via (config || {}).data before config normalization, causing an attacker-controlled body to be sent on requests that did not set one. Additional low-level paths, only reachable when calling exported adapters/helpers (e.g. lib/adapters/http.js, unsafe/helpers/resolveConfig.js) directly with plain configs and no own proxy or paramsSerializer, can inherit polluted proxy values (routing requests through an attacker-controlled proxy) or paramsSerializer values (attacker-controlled URL…
- Affected products in this advisory
- Red Hat Hardened Images
- Cryostat 4
- Migration Toolkit for Applications 8
- Migration Toolkit for Containers
29 more entries in the full advisory.
- Source-reported affected versions
- 1.15.2
- Source-reported fixed versions
- 1.18.0
- 0.33.0
- grafana13-1-main-13.1.1-0.5.hum1
- grafana13-1-main-13.1.1-0.5.2.hum1
2 more entries in the full advisory.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.