CVE-2026-15598

CVE-2026-15598 antv layout 2.0.0 に脆弱性が特定されました。 これはライブラリ lib/util/object.js の関数 setNestedValue に影響します。引数 path を操作すると、オブジェクトのプロトタイプ属性が不適切に制御された変更を受ける可能性があります。この攻撃はリモートから実行可能です。プロジェクトは問題を issue レポートを通じて早期に通知されましたが、まだ応答していません。...

Exploit for CVE-2026-15598

CVE-2026-15598 A weakness has been identified in antv layou...

CVE-2026-15598 antv layout object.js setNestedValue prototype pollution

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

CVE-2026-15598

The CVE affects antv layout 2.0.0, specifically the setNestedValue function in lib/util/object.js. A manipulation of the argument path can lead to prototype pollution, allowing remote modification of object prototype attributes. The advisory notes the attack can be launched remotely, with low att...

CVE-2026-15598 antv layout object.js setNestedValue prototype pollution

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

PT-2026-57909

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

CVE-2026-15598: Improperly Controlled Modification of Object Prototype Attributes

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...