Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Immer Project records in CISA KEVNo Immer Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 46
This affects the package immer before 9.0.6.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01795 · Published 2021-09-01 · Partial fix · 9.0.6 CWE-843
Priority MEDIUM 45
immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01664 · Published 2021-09-02 · Partial fix · 9.0.6 CWE-1321
Priority LOW 37
This affects all versions of package immer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02341 · Published 2021-01-19 · Partial fix · 8.0.1 CWE-471
Open these records in search →