Immer

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3757 npm CRITICAL POC PATCH Act Now

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Prototype Pollution Information Disclosure Immer

NVD GitHub

CVSS 3.1

9.8

EPSS

1.7%

CVE-2021-23436 npm CRITICAL POC PATCH Act Now

This affects the package immer before 9.0.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Memory Corruption Authentication Bypass Immer

NVD GitHub

CVSS 3.1

9.8

EPSS

1.8%

CVE-2021-3757 npm

EPSS 2% CVSS 9.8

CRITICAL POC PATCH Act Now

Prototype Pollution Information Disclosure Immer

NVD GitHub

CVE-2021-23436 npm

EPSS 2% CVSS 9.8

CRITICAL POC PATCH Act Now

Memory Corruption Authentication Bypass Immer

NVD GitHub