GHSA-7q8q-rj6j-mhjq
MediumSummary
Axios can consume inherited properties from nested request option objects when the JavaScript process already has a polluted Object.prototype. The top-level merged config is protected with a null prototype, but nested plain objects such as auth and paramsSerializer are cloned into objects with a prototype.
Risk Assessment
If Object.prototype is polluted, an attacker can influence axios behavior via nested options, potentially leading to unauthorized access or other attacks.
Recommendation
It is recommended to upgrade axios to a version that includes fixes for prototype pollution in nested objects.
Original NVD description (English source)
## Summary Axios can consume inherited properties from nested request option objects when the JavaScript process already has a polluted `Object.prototype`. The top-level merged config is protected with a null prototype, but nested plain objects such as `auth` and `paramsSerializer` are cloned into