UBUNTU-CVE-2026-67320

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-67320
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67320.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-67320
Upstream
Published
2026-08-01T13:17:00Z
Modified
2026-09-03T16:04:44Z
Severity
  • 8.3 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototype object, but request interceptors run after the merge; a common immutable interceptor pattern such as {...config} or Object.assign({}, config) converts the hardened config back into a regular object. axios then dispatches that object without re-hardening it, and the Node HTTP adapter reads config.proxy through the prototype chain. If an attacker can pollute Object.prototype.proxy, affected requests can be routed through an attacker-controlled proxy. For plaintext HTTP requests, the proxy can observe Authorization headers, Basic auth from config.auth, method, absolute URL, Host, and request body, and can return its own response. This does not establish browser impact or HTTPS header/body disclosure under normal TLS validation. Affected versions are >=0.31.1 (fixed in 0.33.0) and >=1.15.2 (fixed in 1.18.0).

References

Affected packages

Ubuntu:Pro:20.04:LTS / node-axios

Package

Name
node-axios
Purl
pkg:deb/ubuntu/node-axios?arch=source&distro=esm-apps%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.19.0+dfsg-2
0.19.0+dfsg-2ubuntu0.1~esm1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "node-axios",
            "binary_version": "0.19.0+dfsg-2ubuntu0.1~esm1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67320.json"

Ubuntu:Pro:22.04:LTS / node-axios

Package

Name
node-axios
Purl
pkg:deb/ubuntu/node-axios?arch=source&distro=esm-apps%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.21.1+dfsg-1
0.23.0+dfsg-2
0.24.0+dfsg-1
0.25.0+dfsg-2
0.26.0+dfsg-1
0.26.0+dfsg-1ubuntu0.1~esm1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "node-axios",
            "binary_version": "0.26.0+dfsg-1ubuntu0.1~esm1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67320.json"

Ubuntu:Pro:24.04:LTS / node-axios

Package

Name
node-axios
Purl
pkg:deb/ubuntu/node-axios?arch=source&distro=esm-apps%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.2.1+dfsg-1
1.5.1+dfsg-1
1.6.2+dfsg-1
1.6.8+dfsg-2
1.6.8+dfsg-2ubuntu0.1~esm1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "node-axios",
            "binary_version": "1.6.8+dfsg-2ubuntu0.1~esm1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67320.json"

Ubuntu:Pro:26.04:LTS / node-axios

Package

Name
node-axios
Purl
pkg:deb/ubuntu/node-axios?arch=source&distro=esm-apps%2Fresolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.11.0+dfsg-1
1.12.1+dfsg-1
1.13.2+dfsg-1build1
1.13.2+dfsg-1ubuntu0.1~esm1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "node-axios",
            "binary_version": "1.13.2+dfsg-1ubuntu0.1~esm1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67320.json"