Lucene search

K
githubGitHub Advisory DatabaseGHSA-FHV8-FX5F-7FXF
HistorySep 20, 2021 - 7:53 p.m.

Prototype Pollution in the merge and clone helper methods

2021-09-2019:53:15
CWE-915
CWE-1321
GitHub Advisory Database
github.com
16

0.002 Low

EPSS

Percentile

60.3%

Impact

Using merge and clone helper methods in the src/core/util.ts module will have prototype pollution. It will affect the popular data visualization library Apache ECharts, which is using and exported these two methods directly.

Patches

It has been patched in https://github.com/ecomfe/zrender/pull/826.
Users should update zrender to 5.2.1. and update echarts to 5.2.1 if project is using echarts.

CPENameOperatorVersion
zrenderlt5.2.1

0.002 Low

EPSS

Percentile

60.3%

Related for GHSA-FHV8-FX5F-7FXF