[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-101899/node-axios via unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Oct 17 07:47:47 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
440c3cea by Salvatore Bonaccorso at 2026-10-17T08:47:19+02:00
Track fixed version for CVE-2026-101899/node-axios via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8435,7 +8435,7 @@ CVE-2026-102073 (A vulnerability has been identified in APOGEE MBC (PPC) (BACnet
 CVE-2026-102007 (The Bit integrations \u2013 Form Integration, Webhook, Spreadsheets, C ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-101899 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
-	- node-axios <unfixed> (bug #1150906)
+	- node-axios 1.20.0-1 (bug #1150906)
 	[trixie] - node-axios <not-affected> (Vulnerable code not present, introduced in 1.15)
 	[bookworm] - node-axios <not-affected> (Vulnerable code not present, introduced in 1.15)
 	NOTE: https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/440c3cea0d43f70c6e3c06228e4cf77035edb86e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/440c3cea0d43f70c6e3c06228e4cf77035edb86e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/fc2e0eb7/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list