Prototype Pollution in immer

CRÍTICO 9.8CVE-2021-3757 · GHSA-c36v-fmgq-m8hx · Published 02/09/2021 · updated 17/06/2026

Em resumo

CVE-2021-3757 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta immer (immer project), immer.
Chance de exploração nos próximos 30 dias (EPSS): 1.7%, maior que 76.8% das vulnerabilidades.
Correção: atualize para 9.0.6 ou posterior.

Package	Affected versions	Patched versions
immer immer_project	`≤ 9.0.5`	No fix yet
immer npm	`≥ 7.0.0, < 9.0.6`	`9.0.6`

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').

NVD description

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Running one of these products? Scan your site to see whether it exposes a vulnerable version.