CVE-2026-78181

Name of the Vulnerable Software and Affected Versions ractivejs ractive versions prior to 1.4.5

Description A weakness exists in the Keypath Handler component where the Ractive#set() function allows improperly controlled modification of object prototype attributes, a condition known as prototype pollution. This issue can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.