---
title: "07-22-2021 Upgrade: Vulnerability Fix"
canonical: "https://help.releasemanagement.app/space/GFJR/1619820548/07-22-2021%20Upgrade%3A%20Vulnerability%20Fix"
format: markdown
---
> Macro (include)

# Summary

> Macro (details)
> 
> | **Date** | July 22nd, 2021 |
> | --- | --- |
> | **Scope of change** | [CLOUD], [DATACENTER] &  [SERVER]<br>*Burnup, Trends and Universal Progress Gadgets Only.* |
> | **Summary of change** | Vulnerability fix for custom JQL used. |
> | **Details of change** | We’ve got a Vulnerability reported for our [Release Management Cloud App](https://marketplace.atlassian.com/apps/1221946/release-management-roadmap-jira-cloud?hosting=cloud&tab=overview) in scope of Cloud Security Participant program. We fixed it there but also decided to go extra mile and change it for our [Gadgets App](https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=cloud&tab=overview) as well. |

# Essence of change

Due to the fact that plain JQL that we use as additional filter for few of our gadgets could contain some of privacy information hard coded … we decided to change it for predefined JQL filters.

So, if you want to do additional filtering for the data source of the gadget please create a filter first and then select it in gadget configuration.

The following gadgets are effected:

- [https://releasemanagement.atlassian.net/wiki/spaces/GFJR/pages/1521254645](https://releasemanagement.atlassian.net/wiki/spaces/GFJR/pages/1521254645)
- [https://releasemanagement.atlassian.net/wiki/spaces/GFJR/pages/1521254818](https://releasemanagement.atlassian.net/wiki/spaces/GFJR/pages/1521254818)
- [https://releasemanagement.atlassian.net/wiki/spaces/GFJR/pages/562593859](https://releasemanagement.atlassian.net/wiki/spaces/GFJR/pages/562593859)

Example of configuration screen  

![image](media://08b02c80-f5d9-44e6-9305-d7caf8da0df6)

> ℹ️ Bare in mind that additional JQL filter should be available for your target audience. Otherwise if users don’t have access to it the gadget fails to render and appropriate error message will be shown.

![image](media://ccbab6a0-cec7-48fc-aca2-7acc26a40fbc)

## How existing gadgets will work after the change

### Burnup and Trends Gadgets

Post version upgrade and before you change custom JQL to predefined JQL filter existing gadgets will work as expected with only one limitation

> ⚠️ custom JQL specified will not the applied to gadget’s data source.

### Universal Progress Gadgets

After the upgrade instances of Universal Progress Gadgets will fail to render with the following error message to appear

![image](media://27d3092e-1df7-4500-88ba-c8406d4a45de)

Users need to click “Edit“ to reconfigure the gadget and select predefined JQL filter as opposed to plain JQL.

> Macro (include)