Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/07/14 6:31 p.m.•20 views

EUVD-2026-43743

A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the file src/API/extend.js of the component Public Root API. The manipulation of the argument plugin leads to improperly controlled modification of object prototype attributes. Remot...

6.5CVSS6.2AI score0.00446EPSS
SaveExploits0References8
NVD
NVD
•added 2026/07/14 4:16 p.m.•16 views

CVE-2026-15699

A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the file src/API/extend.js of the component Public Root API. The manipulation of the argument plugin leads to improperly controlled modification of object prototype attributes. Remot...

6.5CVSS0.00446EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/07/14 3:45 p.m.•45 views

CVE-2026-15699 spencermountain compromise Public Root API extend.js nlp.extend prototype pollution

A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the file src/API/extend.js of the component Public Root API. The manipulation of the argument plugin leads to improperly controlled modification of object prototype attributes. Remot...

6.5CVSS0.00446EPSS
SaveExploits0References7
OSV
OSV
•added 2026/07/14 3:45 p.m.•19 views

CVE-2026-15699 spencermountain compromise Public Root API extend.js nlp.extend prototype pollution

A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the file src/API/extend.js of the component Public Root API. The manipulation of the argument plugin leads to improperly controlled modification of object prototype attributes. Remot...

5.3CVSS6.2AI score
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•5 views

CVE-2026-15699: Improperly Controlled Modification of Object Prototype Attributes

A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the file src/API/extend.js of the component Public Root API. The manipulation of the argument plugin leads to improperly controlled modification of object prototype attributes. Remot...

6.5CVSS6AI score0.00446EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•30 views

PT-2026-58088

A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the file src/API/extend.js of the component Public Root API. The manipulation of the argument plugin leads to improperly controlled modification of object prototype attributes. Remot...

6.5CVSS6.2AI score0.00446EPSS
SaveExploits0References8
Rows per page
Query Builder