diff --git a/advisories/github-reviewed/2021/09/GHSA-fhv8-fx5f-7fxf/GHSA-fhv8-fx5f-7fxf.json b/advisories/github-reviewed/2021/09/GHSA-fhv8-fx5f-7fxf/GHSA-fhv8-fx5f-7fxf.json index 164b6d9d11d..0732fa0b6fd 100644 --- a/advisories/github-reviewed/2021/09/GHSA-fhv8-fx5f-7fxf/GHSA-fhv8-fx5f-7fxf.json +++ b/advisories/github-reviewed/2021/09/GHSA-fhv8-fx5f-7fxf/GHSA-fhv8-fx5f-7fxf.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-fhv8-fx5f-7fxf", - "modified": "2022-09-11T22:26:04Z", + "modified": "2024-12-06T18:20:49Z", "published": "2021-09-20T19:53:15Z", "aliases": [ "CVE-2021-39227" ], "summary": "Prototype Pollution in the merge and clone helper methods", - "details": "### Impact\nUsing `merge` and `clone` helper methods in the `src/core/util.ts` module will have prototype pollution. It will affect the popular data visualization library Apache ECharts, which is using and exported these two methods directly.\n\n### Patches\n \nIt has been patched in https://github.com/ecomfe/zrender/pull/826. \nUsers should update zrender to `5.2.1`. and update echarts to `5.2.1` if project is using echarts.", + "details": "### Impact\nUsing `merge` and `clone` helper methods in the `src/core/util.ts` module will have prototype pollution. It will affect the popular data visualization library Apache ECharts, which is using and exported these two methods directly.\n\n### Patches\n \nIt has been patched in https://github.com/ecomfe/zrender/pull/826. \nUsers should update zrender to `5.2.1`. and update echarts to `5.2.1` if project is using echarts.\n\n### References\nNA\n\n### For more information\nNA\n", "severity": [ { "type": "CVSS_V3", @@ -25,7 +25,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "5.0.0" }, { "fixed": "5.2.1" @@ -33,6 +33,28 @@ ] } ] + }, + { + "package": { + "ecosystem": "npm", + "name": "zrender" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "4.3.3" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 4.3.2" + } } ], "references": [