Description
Using merge and clone helper methods in the src/core/util.ts module will have prototype pollution. It will affect the popular data visualization library Apache ECharts, which is using and exported these two methods directly.
Recommendation
Update the zrender package to the latest compatible version. Followings are version details:
Affected version(s): **<= 4.3.2 >= 5.0.0, < 5.2.1** Patched version(s): **4.3.3 5.2.1**
References
Could your website be exposed too?
SmartScanner can check your website for Prototype Pollution in the merge and clone helper methods and gives you actionable findings to investigate.
Start a free scanRelated Issues
- algoliasearch-helper is vulnerable to Prototype Pollution in _merge() - CVE-2025-3193
- @ianwalter/merge Prototype Pollution via `merge` function - CVE-2021-23397
- Prototype Pollution in algoliasearch-helper - CVE-2021-23433
- Prototype Pollution in merge-change - CVE-2021-23421
You might also like:
See something that needs correcting? Let us knowUpdated December 06, 2024