Immutable (Immutable-js) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 107 known versions, newest CVE from 2026-07-08. Vendor: Immutable-js.

CVEs of Immutable

• CVE-2026-59879 - CVSS 8.7 (high), 2026-07-08: Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the…
• CVE-2026-59880 - CVSS 8.7 (high), 2026-07-08: Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.Set keep keys that share the same…
• CVE-2026-29063 - CVSS 9.8 (critical), 2026-03-06: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via…