CVE-2026-15598

CVE-2026-15598 Se ha identificado una debilidad en antv layout 2.0.0. Esto afecta a la función setNestedValue en la biblioteca lib/util/object.js. Ejecutar una manipulación del argumento path puede conducir a una modificación indebidamente controlada de los atributos del prototipo del objeto. El...

CVE-2026-15598

The CVE affects antv layout 2.0.0, specifically the setNestedValue function in lib/util/object.js. A manipulation of the argument path can lead to prototype pollution, allowing remote modification of object prototype attributes. The advisory notes the attack can be launched remotely, with low att...

CVE-2026-15598 antv layout object.js setNestedValue prototype pollution

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...