Atlassian Jira Service Management Data Center and Server 10.3.x< 10.3.14 / 11.0.x < 11.3.0 (JSDSERVER-16470)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16470 advisory. - ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to...

Prototype Pollution zrender Dependency in Jira Software Data Center and Server

This is a vulnerability in a non-Atlassian Jira Software dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Prototype Pollution vulnerability known as CVE-2021-39227 was introduced in 10.3.0, and 11.0.0 of Jira Software Data...

@cromwell/admin-panel (>=1.1.3 <=2.1.8), @cromwell/cms (>=1.1.7 <=2.1.12) +113 more potentially affected by CVE-2021-39227 via zrender (>=5.0.1 <=5.2.0)

zrender NPM version =5.0.1, =1.1.3, =1.1.7, =0.0.3-beta.7, =0.0.1, =0.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =0.0.1, =7.2.2, =1.0.0, =1.1.0 - @lingxiteam/pcfactory =0.2.0 and more Source cves: CVE-2021-39227 Source advisory: OSV:GHSA-FHV8-FX5F-7FXF...

CVE-2021-39227 Fix prototype pollution in the zrender merge and clone helper methods

ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using merge and clone helper methods in the src/core/util.ts module results in prototype pollution. It affects the popular data visualization library Apache ECharts, which uses and exports...