Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
added 2026/07/10 9:45 a.m.10 views

CVE-2026-15187

A flaw was found in enquirer, a command-line prompt tool. A remote attacker could exploit a vulnerability in the Enquirer.set function by manipulating the question.name argument. This improper handling of object prototype attributes can lead to prototype pollution, allowing an attacker to modify...

5.3CVSS4.6AI score0.00248EPSS
SaveExploits0References10
NVD
NVD
added 2026/07/09 4:16 p.m.11 views

CVE-2026-15187

A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Public Package API. The manipulation of the argument question.name results in improperly controlled modification of object prototype attributes. The attack can be launched remotely...

5.3CVSS0.00248EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/09 2:30 p.m.24 views

EUVD-2026-42599

A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Public Package API. The manipulation of the argument question.name results in improperly controlled modification of object prototype attributes. The attack can be launched remotely...

5.3CVSS5.6AI score0.00248EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:30 p.m.10 views

CVE-2026-15187

A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Public Package API. The manipulation of the argument question.name results in improperly controlled modification of object prototype attributes. The attack can be launched remotely...

5.3CVSS5.6AI score0.00248EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/09 2:30 p.m.8 views

CVE-2026-15187 enquirer Public Package API Enquirer.set prototype pollution

A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Public Package API. The manipulation of the argument question.name results in improperly controlled modification of object prototype attributes. The attack can be launched remotely...

5.3CVSS5.8AI score0.00248EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/07/02 3:43 p.m.7 views

enquirer: Enquirer: Prototype pollution vulnerability allows remote attackers to modify object attributes

A flaw was found in enquirer, a command-line prompt tool. A remote attacker could exploit a vulnerability in the Enquirer.set function by manipulating the question.name argument. This improper handling of object prototype attributes can lead to prototype pollution, allowing an attacker to modify...

5.3CVSS6.1AI score0.00248EPSS
SaveExploits0References11
Rows per page
Query Builder