77 matches found
CLSA-2026-1792746527 TuxCare security update for immer (2 CVEs)
TuxCare rebuilt immer to address 2 CVEs. Fixed in 8.0.1-tuxcare.1...
ROOT-APP-NPM-CVE-2021-23436 CVE-2021-23436 in immer - Patched by Root
Root has patched CVE-2021-23436 in the immer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-3757 CVE-2021-3757 in immer - Patched by Root
Root has patched CVE-2021-3757 in the immer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2020-28477 CVE-2020-28477 in immer - Patched by Root
Root has patched CVE-2020-28477 in the immer package for Root:npm. Multiple fixed versions available...
Malware in immer-js
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in immer-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc0710eb5a0ad9d9eb01cbd2d6f7c1b9cc39b07636d82a05f2cafdf953756bd The package immer-js was found to contain malicious code. Source: ghsa-malware 920c7d161c9e90ea35c168d53dd01e0920704e5f35e76d330fac6fb3c0a2cb87 Any...
MAL-2026-223 Malicious code in immer-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc0710eb5a0ad9d9eb01cbd2d6f7c1b9cc39b07636d82a05f2cafdf953756bd The package immer-js was found to contain malicious code. Source: ghsa-malware 920c7d161c9e90ea35c168d53dd01e0920704e5f35e76d330fac6fb3c0a2cb87 Any...
EUVD-2026-1969
Malicious code in immer-js npm...
Malicious Package
Overview immer-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
EUVD-2021-0500
Malware in sbrugna...
EUVD-2021-1957
Malware in sbrugna...
immer-unter-strom.de Improper Access Control vulnerability OBB-3819124
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE CVE-2020-28477
This affects all versions of package immer...
immer:flex-vector-gc: Object-size in immer::detail::rbts::rrbtree<int, immer::memory_policy<immer::heap_policy<immer:
Detailed Report: https://oss-fuzz.com/testcase?key=5984991886835712 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: flex-vector-gc Job Type: libfuzzerubsanimmer Platform Id: linux Crash Type: Object-size Crash Address: Crash State: immer::detail::rbts::rrbtreeint,...
immer: type confusion vulnerability can lead to a bypass of CVE-2020-28477
A prototype pollution flaw was found in the Node.js immer module. By adding or modifying properties of Object.prototype using a proto or constructor payload, an attacker could execute arbitrary code on the system...
Security Bulletin: IBM App Connect Enterprise Certified Container Designers may be vulnerable to arbitrary code execution via CVE-2021-3757
Summary IBM App Connect Enterprise Certified Container may be vulnerable to arbitrary code execution via CVE-2021-3757. This only affects App Connect Designers Vulnerability Details CVEID: CVE-2021-3757 DESCRIPTION: Node.js immer module could allow a remote attacker to execute arbitrary code on t...
0i0 (1.0.10), 0xgank-tea-advice-pull (1.0.0) +9548 more potentially affected by CVE-2021-3757 via immer (>=7.0.0, <=9.0.5)
immer NPM version =7.0.0, =9.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on immer and may be impacted: - 0i0 1.0.10 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...
GHSA-C36V-FMGQ-M8HX Prototype Pollution in immer
immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...
0i0 (1.0.10), 0xgank-tea-advice-pull (1.0.0) +9548 more potentially affected by CVE-2021-3757 via immer (>=7.0.0, <=9.0.5)
immer NPM version =7.0.0, =9.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on immer and may be impacted: - 0i0 1.0.10 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...