Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities found for phaser3-rex-notes by rexrainbow

    CVE-2026-78179 (GCVE-0-2026-78179)

    Vulnerability from nvd – Published: 2026-08-24 03:00 – Updated: 2026-08-24 03:00
    VLAI
    Title
    rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution
    Summary
    A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the component BehaviorTree Blackboard Data Interface. Such manipulation of the argument key leads to improperly controlled modification of object prototype attributes. The attack can be launched remotely.
    Severity
    5.3 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
    6.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R
    6.3 (Medium)
    CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R
    CWE
    • CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes
    • CWE-94 - Code Injection
    Assigner
    References
    Impacted products
    Vendor Product Version
    rexrainbow phaser3-rex-notes Affected: 1.80.0
    Affected: 1.80.1
    Affected: 1.80.2
    Affected: 1.80.3
    Affected: 1.80.4
    Affected: 1.80.5
    Affected: 1.80.6
    Affected: 1.80.7
    Affected: 1.80.8
    Affected: 1.80.9
    Affected: 1.80.10
    Affected: 1.80.11
    Affected: 1.80.12
    Affected: 1.80.13
    Affected: 1.80.14
    Affected: 1.80.15
    Affected: 1.80.16
    Affected: 1.80.17
        cpe:2.3:a:rexrainbow:phaser3-rex-notes:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    wjm3 (VulDB User)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:rexrainbow:phaser3-rex-notes:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "BehaviorTree Blackboard Data Interface"
          ],
          "product": "phaser3-rex-notes",
          "vendor": "rexrainbow",
          "versions": [
            {
              "status": "affected",
              "version": "1.80.0"
            },
            {
              "status": "affected",
              "version": "1.80.1"
            },
            {
              "status": "affected",
              "version": "1.80.2"
            },
            {
              "status": "affected",
              "version": "1.80.3"
            },
            {
              "status": "affected",
              "version": "1.80.4"
            },
            {
              "status": "affected",
              "version": "1.80.5"
            },
            {
              "status": "affected",
              "version": "1.80.6"
            },
            {
              "status": "affected",
              "version": "1.80.7"
            },
            {
              "status": "affected",
              "version": "1.80.8"
            },
            {
              "status": "affected",
              "version": "1.80.9"
            },
            {
              "status": "affected",
              "version": "1.80.10"
            },
            {
              "status": "affected",
              "version": "1.80.11"
            },
            {
              "status": "affected",
              "version": "1.80.12"
            },
            {
              "status": "affected",
              "version": "1.80.13"
            },
            {
              "status": "affected",
              "version": "1.80.14"
            },
            {
              "status": "affected",
              "version": "1.80.15"
            },
            {
              "status": "affected",
              "version": "1.80.16"
            },
            {
              "status": "affected",
              "version": "1.80.17"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "wjm3 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the component BehaviorTree Blackboard Data Interface. Such manipulation of the argument key leads to improperly controlled modification of object prototype attributes. The attack can be launched remotely."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.5,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1321",
              "description": "Improperly Controlled Modification of Object Prototype Attributes",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "Code Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-24T03:00:08.841Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-394563 | rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/394563"
        },
        {
          "name": "VDB-394563 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/394563/cti"
        },
        {
          "name": "CVE-2026-78179 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-78179"
        },
        {
          "name": "Submit #884183 | Node.js phaser3-rex-plugins 1.80.17 Prototype Pollution",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/884183"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/rexrainbow/phaser3-rex-notes/issues/572"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/rexrainbow/phaser3-rex-notes/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-23T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-23T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-23T18:05:44.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-78179",
    "datePublished": "2026-08-24T03:00:08.841Z",
    "dateReserved": "2026-08-23T16:00:39.005Z",
    "dateUpdated": "2026-08-24T03:00:08.841Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-78179 (GCVE-0-2026-78179)

    Vulnerability from cvelistv5 – Published: 2026-08-24 03:00 – Updated: 2026-08-24 03:00
    VLAI
    Title
    rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution
    Summary
    A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the component BehaviorTree Blackboard Data Interface. Such manipulation of the argument key leads to improperly controlled modification of object prototype attributes. The attack can be launched remotely.
    Severity
    5.3 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
    6.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R
    6.3 (Medium)
    CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R
    CWE
    • CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes
    • CWE-94 - Code Injection
    Assigner
    References
    Impacted products
    Vendor Product Version
    rexrainbow phaser3-rex-notes Affected: 1.80.0
    Affected: 1.80.1
    Affected: 1.80.2
    Affected: 1.80.3
    Affected: 1.80.4
    Affected: 1.80.5
    Affected: 1.80.6
    Affected: 1.80.7
    Affected: 1.80.8
    Affected: 1.80.9
    Affected: 1.80.10
    Affected: 1.80.11
    Affected: 1.80.12
    Affected: 1.80.13
    Affected: 1.80.14
    Affected: 1.80.15
    Affected: 1.80.16
    Affected: 1.80.17
        cpe:2.3:a:rexrainbow:phaser3-rex-notes:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    wjm3 (VulDB User)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:rexrainbow:phaser3-rex-notes:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "BehaviorTree Blackboard Data Interface"
          ],
          "product": "phaser3-rex-notes",
          "vendor": "rexrainbow",
          "versions": [
            {
              "status": "affected",
              "version": "1.80.0"
            },
            {
              "status": "affected",
              "version": "1.80.1"
            },
            {
              "status": "affected",
              "version": "1.80.2"
            },
            {
              "status": "affected",
              "version": "1.80.3"
            },
            {
              "status": "affected",
              "version": "1.80.4"
            },
            {
              "status": "affected",
              "version": "1.80.5"
            },
            {
              "status": "affected",
              "version": "1.80.6"
            },
            {
              "status": "affected",
              "version": "1.80.7"
            },
            {
              "status": "affected",
              "version": "1.80.8"
            },
            {
              "status": "affected",
              "version": "1.80.9"
            },
            {
              "status": "affected",
              "version": "1.80.10"
            },
            {
              "status": "affected",
              "version": "1.80.11"
            },
            {
              "status": "affected",
              "version": "1.80.12"
            },
            {
              "status": "affected",
              "version": "1.80.13"
            },
            {
              "status": "affected",
              "version": "1.80.14"
            },
            {
              "status": "affected",
              "version": "1.80.15"
            },
            {
              "status": "affected",
              "version": "1.80.16"
            },
            {
              "status": "affected",
              "version": "1.80.17"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "wjm3 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the component BehaviorTree Blackboard Data Interface. Such manipulation of the argument key leads to improperly controlled modification of object prototype attributes. The attack can be launched remotely."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.5,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1321",
              "description": "Improperly Controlled Modification of Object Prototype Attributes",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "Code Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-24T03:00:08.841Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-394563 | rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/394563"
        },
        {
          "name": "VDB-394563 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/394563/cti"
        },
        {
          "name": "CVE-2026-78179 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-78179"
        },
        {
          "name": "Submit #884183 | Node.js phaser3-rex-plugins 1.80.17 Prototype Pollution",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/884183"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/rexrainbow/phaser3-rex-notes/issues/572"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/rexrainbow/phaser3-rex-notes/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-23T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-23T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-23T18:05:44.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-78179",
    "datePublished": "2026-08-24T03:00:08.841Z",
    "dateReserved": "2026-08-23T16:00:39.005Z",
    "dateUpdated": "2026-08-24T03:00:08.841Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}