Beveiligingsadvies

CVE-2026-29063

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-06 18:25:22
Laatst bijgewerkt 2026-09-10 12:05:01
Toegewezen door GitHub_M
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.