IM
Product
immutable-js
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add immutable-js to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-29063 | 9.8 | Mar 6 | Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable Affected: < 3.8.3; < 4.3.7; < 5.1.5 |
| CVE-2026-59879 | 7.5 | Jul 8 | Immutable.js `List` 32-bit trie overflow → unrecoverable DoS Affected: >= 5.0.0-beta.1, < 5.1.8; < 4.3.9 |
| CVE-2026-59880 | 7.5 | Jul 8 | Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set Affected: < 4.3.9; >= 5.0.0-beta.1, < 5.1.8 |
Showing 3