CVE-2026-15607

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-15607", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-07-13T15:40:19.194Z", "datePublished": "2026-07-13T23:00:15.192Z", "dateUpdated": "2026-07-15T15:49:45.254Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-07-13T23:00:15.192Z"}, "title": "tanstack db Alias Path select.ts select prototype pollution", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-1321", "lang": "en", "description": "Improperly Controlled Modification of Object Prototype Attributes"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-94", "lang": "en", "description": "Code Injection"}]}], "affected": [{"vendor": "tanstack", "product": "db", "versions": [{"version": "0.6.0", "status": "affected"}, {"version": "0.6.1", "status": "affected"}, {"version": "0.6.2", "status": "affected"}, {"version": "0.6.3", "status": "affected"}, {"version": "0.6.4", "status": "affected"}, {"version": "0.6.5", "status": "affected"}, {"version": "0.6.6", "status": "affected"}, {"version": "0.6.7", "status": "affected"}, {"version": "0.6.8", "status": "affected"}], "cpes": ["cpe:2.3:a:tanstack:db:*:*:*:*:*:*:*:*"], "modules": ["Alias Path Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path Handler. The manipulation results in improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as ac09b1177a100eafa85cba3cd09dd1f53f933ded. A patch should be applied to remediate this issue."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4, "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-07-13T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-07-13T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-07-13T17:45:22.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Dremig (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/378115", "name": "VDB-378115 | tanstack db Alias Path select.ts select prototype pollution", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/378115/cti", "name": "VDB-378115 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-15607", "name": "CVE-2026-15607 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/855677", "name": "Submit #855677 | Node.js @tanstack/db 0.6.8 Prototype Pollution", "tags": ["third-party-advisory"]}, {"url": "https://github.com/TanStack/db/issues/1584", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/TanStack/db/pull/1595", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/TanStack/db/commit/ac09b1177a100eafa85cba3cd09dd1f53f933ded", "tags": ["patch"]}, {"url": "https://github.com/TanStack/db/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-15T15:41:35.306130Z", "id": "CVE-2026-15607", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-15T15:49:45.254Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-15607", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-15T15:41:35.306130Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-15T15:41:17.912Z"}}], "cna": {"tags": ["x_open-source"], "title": "tanstack db Alias Path select.ts select prototype pollution", "credits": [{"lang": "en", "type": "reporter", "value": "Dremig (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4, "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:tanstack:db:*:*:*:*:*:*:*:*"], "vendor": "tanstack", "modules": ["Alias Path Handler"], "product": "db", "versions": [{"status": "affected", "version": "0.6.0"}, {"status": "affected", "version": "0.6.1"}, {"status": "affected", "version": "0.6.2"}, {"status": "affected", "version": "0.6.3"}, {"status": "affected", "version": "0.6.4"}, {"status": "affected", "version": "0.6.5"}, {"status": "affected", "version": "0.6.6"}, {"status": "affected", "version": "0.6.7"}, {"status": "affected", "version": "0.6.8"}]}], "timeline": [{"lang": "en", "time": "2026-07-13T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-07-13T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-07-13T17:45:22.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/378115", "name": "VDB-378115 | tanstack db Alias Path select.ts select prototype pollution", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/378115/cti", "name": "VDB-378115 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-15607", "name": "CVE-2026-15607 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/855677", "name": "Submit #855677 | Node.js @tanstack/db 0.6.8 Prototype Pollution", "tags": ["third-party-advisory"]}, {"url": "https://github.com/TanStack/db/issues/1584", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/TanStack/db/pull/1595", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/TanStack/db/commit/ac09b1177a100eafa85cba3cd09dd1f53f933ded", "tags": ["patch"]}, {"url": "https://github.com/TanStack/db/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path Handler. The manipulation results in improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as ac09b1177a100eafa85cba3cd09dd1f53f933ded. A patch should be applied to remediate this issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1321", "description": "Improperly Controlled Modification of Object Prototype Attributes"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "Code Injection"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-07-13T23:00:15.192Z"}}}, "cveMetadata": {"cveId": "CVE-2026-15607", "state": "PUBLISHED", "dateUpdated": "2026-07-15T15:49:45.254Z", "dateReserved": "2026-07-13T15:40:19.194Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-07-13T23:00:15.192Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:tanstack:db:*:*:*:*:*:*:*:*"], "modules": ["Alias Path Handler"], "product": "db", "vendor": "tanstack", "versions": [{"status": "affected", "version": "0.6.0"}, {"status": "affected", "version": "0.6.1"}, {"status": "affected", "version": "0.6.2"}, {"status": "affected", "version": "0.6.3"}, {"status": "affected", "version": "0.6.4"}, {"status": "affected", "version": "0.6.5"}, {"status": "affected", "version": "0.6.6"}, {"status": "affected", "version": "0.6.7"}, {"status": "affected", "version": "0.6.8"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path Handler. The manipulation results in improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as ac09b1177a100eafa85cba3cd09dd1f53f933ded. A patch should be applied to remediate this issue."}, {"lang": "es", "value": "Una vulnerabilidad fue detectada en tanstack db hasta 0.6.8. Afectada por esta vulnerabilidad es la funci\u00f3n select del archivo src/query/compiler/select.ts del componente Alias Path Handler. La manipulaci\u00f3n resulta en modificaci\u00f3n indebidamente controlada de atributos de prototipo de objeto. El ataque puede ser lanzado remotamente. El exploit ahora es p\u00fablico y puede ser usado. El parche se identifica como ac09b1177a100eafa85cba3cd09dd1f53f933ded. Un parche deber\u00eda ser aplicado para remediar este problema."}], "id": "CVE-2026-15607", "lastModified": "2026-10-24T22:10:00.210", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-15607", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-15T15:41:35.306130Z", "version": "2.0.3"}}]}, "published": "2026-07-13T23:16:46.450", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/TanStack/db/"}, {"source": "cna@vuldb.com", "url": "https://github.com/TanStack/db/commit/ac09b1177a100eafa85cba3cd09dd1f53f933ded"}, {"source": "cna@vuldb.com", "url": "https://github.com/TanStack/db/issues/1584"}, {"source": "cna@vuldb.com", "url": "https://github.com/TanStack/db/pull/1595"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-15607"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/855677"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/378115"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/378115/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}, {"lang": "en", "value": "CWE-1321"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.6.0,0.6.8]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "db", "source": "cna", "vendor": "tanstack"}, "product": "db", "vendor": "tanstack"}], "created": "2026-07-14T13:00:04.572401+00:00", "updated": "2026-07-31T11:15:05.500929+00:00", "vendors": ["tanstack", "tanstack$PRODUCT$db"]}