CVE-2026-29063 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the…
High CVSS: 8.7

CVE-2026-29063

Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.
Vendor
-
Product
-
CWE
CWE-1321
Yayın Tarihi
2026-03-06 19:16:21
Güncelleme
2026-03-09 13:35:34
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-1321 HIGH 2026

Referanslar

https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3 https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8 https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5 https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw