What’s Vulnerable › Products

immutable-js vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your immutable-js version is affected

Latest immutable-js vulnerabilities

• CVE-2026-59879 — Immutable.js `List` 32-bit trie overflow → unrecoverable DoS (CVSS 7.5)
• CVE-2026-59880 — Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set (CVSS 7.5)
• CVE-2026-29063 — Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable (CVSS 9.8)