Skip to main content

Observability With Instana Agent

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2026-14893 HIGH PATCH This Week

Prototype pollution in the @instana/core Node.js tracer, part of IBM Observability with Instana Agent builds 1.0.303 to 1.0.320, allows a local attacker to inject arbitrary properties into JavaScript object prototypes. This can lead to information disclosure and high integrity impact. No public exploit or active exploitation reported; vendor patch is available.

Information Disclosure IBM Node.js Prototype Pollution Observability With Instana Agent
NVD
CVSS 3.1
7.3
EPSS
0.3%
CVE-2026-14893
EPSS 0% CVSS 7.3
HIGH PATCH This Week

Prototype pollution in the @instana/core Node.js tracer, part of IBM Observability with Instana Agent builds 1.0.303 to 1.0.320, allows a local attacker to inject arbitrary properties into JavaScript object prototypes. This can lead to information disclosure and high integrity impact. No public exploit or active exploitation reported; vendor patch is available.

Information Disclosure IBM Node.js +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy