From 43e73b3239f886bc0fdeb5351ff7899bf826f0c2 Mon Sep 17 00:00:00 2001 From: Anupam Mediratta Date: Wed, 29 Jul 2026 09:55:02 +0530 Subject: [PATCH] fix: upgrade axios to 1.15.2 (CVE-2026-42264) (#17508) ## Summary Upgrade axios from 1.15.1 to 1.15.2 to fix CVE-2026-42264. ## Vulnerability | Field | Value | |-------|-------| | **ID** | CVE-2026-42264 | | **Severity** | HIGH | | **Scanner** | trivy | | **Rule** | `CVE-2026-42264` | | **File** | `agent/sandbox/sandbox_base_image/nodejs/package-lock.json` | | **Assessment** | Likely exploitable | **Description**: axios: Axios: Prototype pollution allows information disclosure and request manipulation --- *Automated security fix by [OrbisAI Security](https://orbisappsec.com)* --- agent/sandbox/sandbox_base_image/nodejs/package-lock.json | 8 ++++---- agent/sandbox/sandbox_base_image/nodejs/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/agent/sandbox/sandbox_base_image/nodejs/package-lock.json b/agent/sandbox/sandbox_base_image/nodejs/package-lock.json index 0941fce651..d3b403f660 100644 --- a/agent/sandbox/sandbox_base_image/nodejs/package-lock.json +++ b/agent/sandbox/sandbox_base_image/nodejs/package-lock.json @@ -9,7 +9,7 @@ "version": "1.0.0", "license": "ISC", "dependencies": { - "axios": "^1.15.1" + "axios": "^1.15.2" } }, "node_modules/asynckit": { @@ -19,9 +19,9 @@ "license": "MIT" }, "node_modules/axios": { - "version": "1.15.1", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.1.tgz", - "integrity": "sha512-WOG+Jj8ZOvR0a3rAn+Tuf1UQJRxw5venr6DgdbJzngJE3qG7X0kL83CZGpdHMxEm+ZK3seAbvFsw4FfOfP9vxg==", + "version": "1.15.2", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.2.tgz", + "integrity": "sha512-wLrXxPtcrPTsNlJmKjkPnNPK2Ihe0hn0wGSaTEiHRPxwjvJwT3hKmXF4dpqxmPO9SoNb2FsYXj/xEo0gHN+D5A==", "license": "MIT", "dependencies": { "follow-redirects": "^1.15.11", diff --git a/agent/sandbox/sandbox_base_image/nodejs/package.json b/agent/sandbox/sandbox_base_image/nodejs/package.json index 9515ee4448..3bfa73b3ed 100644 --- a/agent/sandbox/sandbox_base_image/nodejs/package.json +++ b/agent/sandbox/sandbox_base_image/nodejs/package.json @@ -10,6 +10,6 @@ "license": "ISC", "description": "", "dependencies": { - "axios": "^1.15.1" + "axios": "^1.15.2" } }