A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Antv |
|
No data.
No data.
No data.
References
History
Mon, 13 Jul 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet. | |
| Title | antv layout object.js setNestedValue prototype pollution | |
| First Time appeared |
Antv
Antv layout |
|
| Weaknesses | CWE-1321 CWE-94 |
|
| CPEs | cpe:2.3:a:antv:layout:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Antv
Antv layout |
|
| References |
| |
| Metrics |
cvssV2_0
|
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2026-07-13T22:00:11.338Z
Reserved: 2026-07-13T14:08:46.995Z
Link: CVE-2026-15598
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.