Immer Project

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3757 Sep 02, 12:15 npm CRITICAL POC PATCH Act Now

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Prototype Pollution Immer Immer Project

NVD GitHub

CVSS 3.1

9.8

EPSS

1.7%

CVE-2021-23436 Sep 01, 18:15 npm CRITICAL POC PATCH Act Now

This affects the package immer before 9.0.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Memory Corruption Immer Immer Project

NVD GitHub

CVSS 3.1

9.8

EPSS

1.8%

CVE-2021-3757 npm

EPSS 2% CVSS 9.8

CRITICAL POC PATCH Act Now

Information Disclosure Prototype Pollution Immer +1

NVD GitHub

CVE-2021-23436 npm

EPSS 2% CVSS 9.8

CRITICAL POC PATCH Act Now

Authentication Bypass Memory Corruption Immer +1

NVD GitHub