7.3
High
CVE-2026-14893 IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component…
Description
IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Observability with Instana (Agent) 1.0 | earliest → 1.0.320 | No fix stated |