Vulnerability	Vulnerable Version
H Improperly Controlled Modification of Dynamically-Determined Object Attributes axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes through the `transformResponse` and request serialization paths in the defaults configuration. An attacker can influence JSON parsing and request handling by supplying a crafted object with inherited `parseReviver`, `responseType`, `transitional`, `env`, or `formSerializer` properties, causing Axios to read attacker-controlled prototype values during response parsing or form encoding. This can lead to malformed response processing, unexpected parser behavior, and application-level data corruption or denial-of-service in code that passes untrusted config objects to Axios. How to fix Improperly Controlled Modification of Dynamically-Determined Object Attributes? Upgrade `axios` to version 1.15.2 or higher.	>=1.0.0 <1.15.2

Improperly Controlled Modification of Dynamically-Determined Object Attributes

axios is a promise-based HTTP client for the browser and Node.js.

Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes through the transformResponse and request serialization paths in the defaults configuration. An attacker can influence JSON parsing and request handling by supplying a crafted object with inherited parseReviver, responseType, transitional, env, or formSerializer properties, causing Axios to read attacker-controlled prototype values during response parsing or form encoding. This can lead to malformed response processing, unexpected parser behavior, and application-level data corruption or denial-of-service in code that passes untrusted config objects to Axios.

How to fix Improperly Controlled Modification of Dynamically-Determined Object Attributes?

Upgrade axios to version 1.15.2 or higher.

>=1.0.0 <1.15.2

Go back to all versions of this package