Description
immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
References (2)
Core 2
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/immerjs/immer/commit/fa671e55ee9bd42ae08cc239102b665a23958237
Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/23d38099-71cd-42ed-a77a-71e68094adfa
Scores
CVSS v3
9.8
EPSS
0.0059
EPSS Percentile
69.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-1321
Status
published
Products (2)
immer_project/immer
< 9.0.5
npm/immer
7.0.0 - 9.0.6npm
Published
Sep 02, 2021
Tracked Since
Feb 18, 2026