CVE-2026-101900 | Axios up to 1.19.x FormData ResolveConfig prototype pollution

September 28, 2026 Yanac

A vulnerability was found in Axios up to 1.19.x. It has been classified as critical. Affected by this issue is the function ResolveConfig of the component FormData. This manipulation causes improperly controlled modification of object prototype attributes.

This vulnerability is registered as CVE-2026-101900. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More