Skip to content
7.3 High

CVE-2026-14893 IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component…

Description

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API.

Affected products and versions

Product Affected versions Fixed in
Observability with Instana (Agent) 1.0 earliest → 1.0.320 No fix stated
The 3 CVEs of Observability with Instana (Agent) →
Track this CVE