Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Immer Project Clear all filters
TI-2021-02689 CVE-2021-3757 · GHSA-c36v-fmgq-m8hx

Prototype Pollution in immerjs/immer

Priority MEDIUM 45

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01664 Published 2021-09-02 Partial fix · 9.0.6 CWE-1321
TI-2021-06128 CVE-2021-23436 · GHSA-33f9-j839-rf8h

Prototype pollution in immer

Priority MEDIUM 46

This affects the package immer before 9.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01795 Published 2021-09-01 Partial fix · 9.0.6 CWE-843
TI-2020-17287 CVE-2020-28477 · GHSA-9qmh-276g-x5pj

Prototype pollution in immer

Priority LOW 37

This affects all versions of package immer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02341 Published 2021-01-19 Partial fix · 8.0.1 CWE-471