baidu zrender vulnerabilities

Latest baidu zrender CVEs

Newest publication first

1. CVE-2021-39227 Fix prototype pollution in the zrender merge and clone helper methods

   Published 2021-09-17

   Critical·CVSS 9.8 EPSS 1.3%

   ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using merge and clone helper methods in the src/core/util.ts module results in prototype pollution. It affects the popular data visualization library Apache ECharts, which u...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.