Vulnerabilities

TI-2026-42693 CVE-2026-59879 · GHSA-v56q-mh7h-f735

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

HIGH 77

Immutable.js provides many Persistent Immutable data structures.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00575 Published 2026-07-08 Partial fix · 5.1.8, 4.3.9 +1 CWE-1284

TI-2026-42694 CVE-2026-59880 · GHSA-xvcm-6775-5m9r

HIGH 77

Immutable.js provides many Persistent Immutable data structures.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00665 Published 2026-07-08 Partial fix · 4.3.9, 5.1.8 +1 CWE-407

TI-2026-23208 CVE-2026-29063 · GHSA-wf6x-7x77-mvgw

MEDIUM 46

Immutable.js provides many Persistent Immutable data structures.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0099 Published 2026-03-06 Partial fix · 3.8.3, 4.3.7 +2 CWE-1321