axa group vulnerabilities

Products

• nlp.js 1

Latest axa group CVEs

Newest publication first

1. CVE-2026-112102 AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection

   Published 2026-10-19

   Medium·CVSS 5.3 EPSS 0.31%

   A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is po...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.