{"vulnerability": "CVE-2026-101898", "sightings": [{"uuid": "9655ca1d-2c58-46ab-92e5-3902a1320837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101898", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwltt3iwtr24", "content": "CVE-2026-101901: axios patched three flaws in its Node.js and browser HTTP client before 1.20.0: an HTTP/2 denial of service, an HTTP/2 proxy and DNS bypass (CVE-2026-101898), and fetch adapter header injection (CVE-2026-101900). Update to 1.20.0.", "creation_timestamp": "2026-09-28T17:32:10.255779Z"}, {"uuid": "10ca2e23-ea4f-401a-9312-1aa858b58445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-7-vulnerabilita-in-prodotti-axios", "content": "", "creation_timestamp": "2026-09-29T07:31:20.000000Z"}, {"uuid": "21fe740a-4a36-423c-ba22-bdbef5ff96b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101898", "type": "published-proof-of-concept", "source": "https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v", "content": "", "creation_timestamp": "2026-09-16T08:58:16.000000Z"}]}