{"action":"Upgrade immer to 9.0.6 or later.","affected":[{"fixed":"9.0.6","introduced":"7.0.0"}],"component":"immer","cve_ids":["CVE-2021-23436"],"ecosystem":"npm","epss":0.01795,"exploited":false,"fixed_versions":["9.0.6"],"ghsa_id":"GHSA-33f9-j839-rf8h","id":"tcs_01M5KEVR93CZEZ7YF3TJ09SE50","modified_at":"2025-01-14T09:12:14.521021Z","published_at":"2021-09-02T17:17:37Z","references":["https://osv.dev/vulnerability/GHSA-33f9-j839-rf8h","https://nvd.nist.gov/vuln/detail/CVE-2021-23436","https://github.com/immerjs/immer/commit/fa671e55ee9bd42ae08cc239102b665a23958237","https://github.com/immerjs/immer","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1579266","https://snyk.io/vuln/SNYK-JS-IMMER-1540542"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-33f9-j839-rf8h","url":"https://osv.dev/vulnerability/GHSA-33f9-j839-rf8h"}],"summary":"Prototype Pollution in immer"}