CVE-2026-15607 | tanstack db up to 0.6.8 Alias Path select.ts select prototype pollution (Issue 1584)

A vulnerability, which was classified as critical, was found in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path Handler. The manipulation results in improperly controlled modification of object prototype attributes.

This vulnerability is cataloged as CVE-2026-15607. The attack may be launched remotely. Furthermore, there is an exploit available.

A patch should be applied to remediate this issue.