ROOT-APP-NPM-CVE-2021-3757 CVE-2021-3757 in immer - Patched by Root

Root has patched CVE-2021-3757 in the immer package for Root:npm. Multiple fixed versions available...

Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.5.2 security update and bugfix advisory

The Migration Toolkit for Containers MTC 1.5.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Security Bulletin: IBM App Connect Enterprise Certified Container Designers may be vulnerable to arbitrary code execution via CVE-2021-3757

Summary IBM App Connect Enterprise Certified Container may be vulnerable to arbitrary code execution via CVE-2021-3757. This only affects App Connect Designers Vulnerability Details CVEID: CVE-2021-3757 DESCRIPTION: Node.js immer module could allow a remote attacker to execute arbitrary code on t...

0i0 (1.0.10), 0xgank-tea-advice-pull (1.0.0) +9561 more potentially affected by CVE-2021-3757 via immer (>=7.0.0, <=9.0.5)

immer NPM version =7.0.0, =9.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on immer and may be impacted: - 0i0 1.0.10 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

CVE-2021-3757

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2021-3757 Prototype Pollution in immerjs/immer

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2021-3757

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2021-3757

CVE-2021-3757 refers to a prototype pollution flaw in the immer module used by Node.js. The vulnerability arises from improper modification of Object.prototype attributes via proto /constructor payloads, potentially enabling remote code execution, information disclosure, or denial of service. Doc...