immutable-js Schwachstellen (CVE)

Für immutable-js veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse

8.7Hoch

CVE-2026-59879 vor 4 Monaten

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

immutable-js immutable-js

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 ** 31 in setListBoun…

8.7Hoch

CVE-2026-59880 vor 4 Monaten

Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

immutable-js immutable-js

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.Set keep keys that share the same 32-bit hash in a HashCollisionNode collision bucket that is scanned linearly, allowing an attacker who con…

8.7Hoch

CVE-2026-29063 vor 8 Monaten

Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

immutable-js immutable-js; Red Hat Cluster Observability Operator 1.5.0; Red Hat Migration Toolkit for Virtualization 2.1; Red Hat Migration Toolkit for Virtualization 2.9

Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been pa…