{"id":"ROOT-APP-NPM-CVE-2026-44490","summary":"CVE-2026-44490 in axios - Patched by Root","details":"Root has patched CVE-2026-44490 in the axios package for Root:npm. Multiple fixed versions available.","modified":"2026-09-14T11:15:03.228008589Z","published":"2026-09-14T10:38:36Z","upstream":["CVE-2026-44490"],"database_specific":{"distro_version":"","severity":"MEDIUM","source":"Root","distro":"npm"},"affected":[{"package":{"name":"axios","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-aikido.5"},{"fixed":"1.12.1-aikido.20"},{"fixed":"0.21.4-aikido.8"},{"fixed":"1.13.5-aikido.13"},{"fixed":"1.13.4-aikido.7"},{"fixed":"1.8.4-aikido.10"},{"fixed":"1.2.1-aikido.1"},{"fixed":"1.2.1-aikido.2"},{"fixed":"1.2.1-aikido.3"},{"fixed":"0.31.1-aikido.1"},{"fixed":"1.15.2-aikido.2"},{"fixed":"1.12.0-aikido.11"},{"fixed":"1.13.2-aikido.10"},{"fixed":"0.21.1-aikido.2"},{"fixed":"0.21.1-aikido.3"},{"fixed":"0.21.1-aikido.4"},{"fixed":"0.21.1-aikido.5"},{"fixed":"1.2.1-aikido.4"},{"fixed":"0.31.1-aikido.2"},{"fixed":"1.15.2-aikido.3"},{"fixed":"1.15.0-aikido.9"},{"fixed":"1.15.0-aikido.10"},{"fixed":"1.15.0-aikido.11"},{"fixed":"1.15.0-aikido.12"},{"fixed":"0.27.2-aikido.10"},{"fixed":"1.14.0-aikido.8"},{"fixed":"1.14.0-aikido.9"},{"fixed":"1.14.0-aikido.10"},{"fixed":"1.13.6-aikido.5"},{"fixed":"1.12.2-aikido.7"},{"fixed":"1.7.9-aikido.9"},{"fixed":"1.7.9-aikido.10"},{"fixed":"1.13.4-aikido.8"},{"fixed":"1.8.3-aikido.8"},{"fixed":"1.15.0-aikido.13"},{"fixed":"1.13.2-aikido.11"},{"fixed":"1.12.0-aikido.12"},{"fixed":"1.13.6-aikido.6"},{"fixed":"1.7.9-aikido.11"},{"fixed":"1.8.4-aikido.11"},{"fixed":"1.13.5-aikido.14"},{"fixed":"1.15.2-aikido.4"},{"fixed":"1.8.3-aikido.9"},{"fixed":"1.14.0-aikido.11"},{"fixed":"0.31.1-aikido.3"},{"fixed":"1.2.1-aikido.5"},{"fixed":"1.16.0-aikido.3"},{"fixed":"1.16.0-aikido.1"},{"fixed":"1.16.0-aikido.2"}]}],"database_specific":{"source":"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2026-44490.json","upstream_version":"1.15.2","all_fixed_versions":["1.15.2-aikido.5","1.12.1-aikido.20","0.21.4-aikido.8","1.13.5-aikido.13","1.13.4-aikido.7","1.8.4-aikido.10","1.2.1-aikido.1","1.2.1-aikido.2","1.2.1-aikido.3","0.31.1-aikido.1","1.15.2-aikido.2","1.12.0-aikido.11","1.13.2-aikido.10","0.21.1-aikido.2","0.21.1-aikido.3","0.21.1-aikido.4","0.21.1-aikido.5","1.2.1-aikido.4","0.31.1-aikido.2","1.15.2-aikido.3","1.15.0-aikido.9","1.15.0-aikido.10","1.15.0-aikido.11","1.15.0-aikido.12","0.27.2-aikido.10","1.14.0-aikido.8","1.14.0-aikido.9","1.14.0-aikido.10","1.13.6-aikido.5","1.12.2-aikido.7","1.7.9-aikido.9","1.7.9-aikido.10","1.13.4-aikido.8","1.8.3-aikido.8","1.15.0-aikido.13","1.13.2-aikido.11","1.12.0-aikido.12","1.13.6-aikido.6","1.7.9-aikido.11","1.8.4-aikido.11","1.13.5-aikido.14","1.15.2-aikido.4","1.8.3-aikido.9","1.14.0-aikido.11","0.31.1-aikido.3","1.2.1-aikido.5","1.16.0-aikido.3","1.16.0-aikido.1","1.16.0-aikido.2"],"root_patch_version":"aikido.5","root_patched":true,"total_fixed_versions":49}},{"package":{"name":"@rootio/axios","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-root.io.5"},{"fixed":"1.12.1-root.io.20"},{"fixed":"0.21.4-root.io.8"},{"fixed":"1.13.5-root.io.13"},{"fixed":"1.13.4-root.io.7"},{"fixed":"1.8.4-root.io.10"},{"fixed":"1.2.1-root.io.1"},{"fixed":"1.2.1-root.io.2"},{"fixed":"1.2.1-root.io.3"},{"fixed":"0.31.1-root.io.1"},{"fixed":"1.15.2-root.io.2"},{"fixed":"1.12.0-root.io.11"},{"fixed":"1.13.2-root.io.10"},{"fixed":"0.21.1-root.io.2"},{"fixed":"0.21.1-root.io.3"},{"fixed":"0.21.1-root.io.4"},{"fixed":"0.21.1-root.io.5"},{"fixed":"1.2.1-root.io.4"},{"fixed":"0.31.1-root.io.2"},{"fixed":"1.15.2-root.io.3"},{"fixed":"1.15.0-root.io.9"},{"fixed":"1.15.0-root.io.10"},{"fixed":"1.15.0-root.io.11"},{"fixed":"1.15.0-root.io.12"},{"fixed":"0.27.2-root.io.10"},{"fixed":"1.14.0-root.io.8"},{"fixed":"1.14.0-root.io.9"},{"fixed":"1.14.0-root.io.10"},{"fixed":"1.13.6-root.io.5"},{"fixed":"1.12.2-root.io.7"},{"fixed":"1.7.9-root.io.9"},{"fixed":"1.7.9-root.io.10"},{"fixed":"1.13.4-root.io.8"},{"fixed":"1.8.3-root.io.8"},{"fixed":"1.15.0-root.io.13"},{"fixed":"1.13.2-root.io.11"},{"fixed":"1.12.0-root.io.12"},{"fixed":"1.13.6-root.io.6"},{"fixed":"1.7.9-root.io.11"},{"fixed":"1.8.4-root.io.11"},{"fixed":"1.13.5-root.io.14"},{"fixed":"1.15.2-root.io.4"},{"fixed":"1.8.3-root.io.9"},{"fixed":"1.14.0-root.io.11"},{"fixed":"0.31.1-root.io.3"},{"fixed":"1.2.1-root.io.5"},{"fixed":"1.16.0-root.io.3"},{"fixed":"1.16.0-root.io.1"},{"fixed":"1.16.0-root.io.2"}]}],"database_specific":{"root_patch_version":"root.io.5","root_patched":true,"total_fixed_versions":49,"upstream_version":"1.15.2","all_fixed_versions":["1.15.2-root.io.5","1.12.1-root.io.20","0.21.4-root.io.8","1.13.5-root.io.13","1.13.4-root.io.7","1.8.4-root.io.10","1.2.1-root.io.1","1.2.1-root.io.2","1.2.1-root.io.3","0.31.1-root.io.1","1.15.2-root.io.2","1.12.0-root.io.11","1.13.2-root.io.10","0.21.1-root.io.2","0.21.1-root.io.3","0.21.1-root.io.4","0.21.1-root.io.5","1.2.1-root.io.4","0.31.1-root.io.2","1.15.2-root.io.3","1.15.0-root.io.9","1.15.0-root.io.10","1.15.0-root.io.11","1.15.0-root.io.12","0.27.2-root.io.10","1.14.0-root.io.8","1.14.0-root.io.9","1.14.0-root.io.10","1.13.6-root.io.5","1.12.2-root.io.7","1.7.9-root.io.9","1.7.9-root.io.10","1.13.4-root.io.8","1.8.3-root.io.8","1.15.0-root.io.13","1.13.2-root.io.11","1.12.0-root.io.12","1.13.6-root.io.6","1.7.9-root.io.11","1.8.4-root.io.11","1.13.5-root.io.14","1.15.2-root.io.4","1.8.3-root.io.9","1.14.0-root.io.11","0.31.1-root.io.3","1.2.1-root.io.5","1.16.0-root.io.3","1.16.0-root.io.1","1.16.0-root.io.2"],"source":"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2026-44490.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L"}]}