Skip to content
COOEY

FAIL › dossier

immutable-js

VENDOR

Failure events
1
Zero-days
0
RCEs
1
On KEV
0
Critical
1
Worst shame
50
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 1
DATEEVENTSEVSUMMARY
2026-03-06 CVE-2026-29063 critical Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8