immutable-js güvenlik açıkları (CVE)

immutable-js için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç

8.7Yüksek

CVE-2026-59879 4 ay önce

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

immutable-js immutable-js

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 ** 31 in setListBoun…

8.7Yüksek

CVE-2026-59880 4 ay önce

Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

immutable-js immutable-js

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.Set keep keys that share the same 32-bit hash in a HashCollisionNode collision bucket that is scanned linearly, allowing an attacker who con…

8.7Yüksek

CVE-2026-29063 8 ay önce

Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

immutable-js immutable-js; Red Hat Cluster Observability Operator 1.5.0; Red Hat Migration Toolkit for Virtualization 2.1; Red Hat Migration Toolkit for Virtualization 2.9

Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been pa…