CVE-2026-102756 | DataEase up to 2.10.25 Chart Rendering common_antv.ts configAxisLabelLengthLimit cross site scripting

October 14, 2026 Yanac

A vulnerability categorized as problematic has been discovered in DataEase up to 2.10.25. The affected element is the function configAxisLabelLengthLimit of the file core/core-frontend/src/views/chart/components/js/panel/common/common_antv.ts of the component Chart Rendering. Executing a manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2026-102756. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More