Sign in Free assessment

immutable-js records

3 published records for vendor immutable-js.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-29063No exploit	Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutableimmutable-js · immutable · CWE-1321 Pre-auth Prototype pollution	High8.7	—	1.2%	Mar 6, 2026
34Monitor	CVE-2026-59879No exploit	Immutable.js `List` 32-bit trie overflow → unrecoverable DoSimmutable-js · immutable · CWE-190 Pre-auth Memory safety	High8.7	—	0.7%	Jul 8, 2026
34Monitor	CVE-2026-59880No exploit	Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Setimmutable-js · immutable · CWE-407 Pre-auth	High8.7	—	0.7%	Jul 8, 2026

CVE-2026-29063
34Monitor
Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
- Prototype pollution
immutable-js · immutableMar 6, 2026
CVE-2026-59879
34Monitor
Immutable.js `List` 32-bit trie overflow → unrecoverable DoS
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
- Memory safety
immutable-js · immutableJul 8, 2026
CVE-2026-59880
34Monitor
Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
immutable-js · immutableJul 8, 2026