npm/immer CVE-2021-23436: critical 9.8, EPSS 1.80%
Prototype Pollution in immer
Action: Upgrade immer to 9.0.6 or later.
npm i immer@9.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 9.0.6 | - |
Fixed versions
| 9.0.6 |
Sources
- osv: GHSA-33f9-j839-rf8h
- https://nvd.nist.gov/vuln/detail/CVE-2021-23436
- https://github.com/immerjs/immer/commit/fa671e55ee9bd42ae08cc239102b665a23958237
- https://github.com/immerjs/immer
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1579266
- https://snyk.io/vuln/SNYK-JS-IMMER-1540542
CVE-2021-23436 · published · modified · JSON