GitHub Advisoryadvisory · npm

GHSA-c36v-fmgq-m8hx Prototype Pollution in immer

HIGH Published 2021-09-07 Modified 2024-04-25 Official page ↗

Aliases: CVE-2021-3757
Ecosystem: npm
Packages: immer
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-1321, CWE-915
Reviewed: 2021-09-03

Affected packages

• npm immer: >= 7.0.0, < 9.0.6 → fixed in 9.0.6

Description

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').

Related

Alias · CVE (1)

CVE-2021-3757 immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability

Weakness · CWE (2)

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness
CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes weakness

References