GHSA-fhv8-fx5f-7fxf
Prototype Pollution in the merge and clone helper methods
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Using `merge` and `clone` helper methods in the `src/core/util.ts` module will have prototype pollution. It will affect the popular data visualization library Apache ECharts, which is using and exported these two methods directly.
### Patches
It has been patched in https://github.com/ecomfe/zrender/pull/826.
Users should update zrender to `5.2.1`. and update echarts to `5.2.1` if project is using echarts.
### References
NA
### For more information
NA
References
External links from the advisory. They lead to third-party sites.