Details
-
Task
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Fixed
-
None
-
MXS-CAPACITY-26-2, MXS-SPRINT-277
Description
CVE-2026-42033 with severity High.
Package type npm, name axios, affected version 1.13.6, fix version 1.15.1.
Recommended upgrade: -.
Total number of findings: 26
Environment: MaxScale
Investigation
Elastic (Kibana Discover): https://mariadb-serverless-prod-e6994e.kb.us-central1.gcp.elastic.cloud:443/app/discover#/?_g=%28filters%3A%21%28%29%2CrefreshInterval%3A%28pause%3A%21t%2Cvalue%3A0%29%2Ctime%3A%28from%3Anow-1440m%2Cto%3Anow%29%29&_a=%28columns%3A%21%28%29%2CdataSource%3A%28dataViewId%3Asm-vm-v2-default%2Ctype%3AdataView%29%2Cfilters%3A%21%28%29%2Cinterval%3Aauto%2Cquery%3A%28language%3Akuery%2Cquery%3A%27%28cve_id.keyword%3A%22CVE-2026-42033%22+or+cve_id%3A%22CVE-2026-42033%22%29+and+%28data_source.keyword%3A%22lw%22+or+data_source%3A%22lw%22%29+and+%28affects.base_id.keyword%3A%22MaxScale%22+or+affects.base_id%3A%22MaxScale%22%29%27%29%2Csort%3A%21%28%21%28%27%40timestamp%27%2Cdesc%29%29%29
Grafana: https://vm.sec.mariadb.net/d/be0u2pm2acjk0a/findings-over-time?from=now-1440m&to=now&var-BasicId=MaxScale&var-CveId=CVE-2026-42033&var-ExtraId=25.01.7&var-FindingType=ctr&var-Type=application
Lacework: https://mariadb.lacework.net/ui/vulnerabilities/vuln/CVE-2026-42033
For general information on vulnerability management please refer to the Wiki page.
| Type | Software Package | Version | package_name | Report Date |
|---|---|---|---|---|
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.debian.bookworm.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.debian.bullseye.aarch64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.debian.bullseye.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.debian.trixie.aarch64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.debian.trixie.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.rhel.8.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.rhel.9.ppc64le | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.rhel.9.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.sles.15.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.ubuntu.jammy.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | maxscale-25.01.7-1.ubuntu.noble.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.01.7 | unknown | 2026-09-15T02:17:13Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.debian.bookworm.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.debian.bullseye.aarch64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.debian.bullseye.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.debian.trixie.aarch64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.debian.trixie.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.rhel.10.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.rhel.8.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.rhel.9.ppc64le | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.rhel.9.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.sles.15.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.ubuntu.jammy.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.ubuntu.noble.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | maxscale-25.10.3-2.ubuntu.resolute.x86_64 | 2026-07-06T08:14:07Z |
| application | MaxScale | 25.10.3 | unknown | 2026-09-15T02:17:13Z |