VDB
CVE-2021-23436
CVE-2021-23436
PUBLISHED
CVSS 5.599999904632568 MEDIUM
Prototype Pollution in immer
EPSS 1.78% · 76.9th percentile
Risk Scores
CVSS 3.1
5.599999904632568
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
EPSS Score
1.78%
76.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | immer | 7.0.0 |
| immer_project | immer | 0 |
| n/a | immer | unspecified |
Timeline
- Sep 1, 2021 CVE Published
- Sep 2, 2021 EPSS Score
- Sep 10, 2021 CVE Updated
- Oct 30, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 24, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Apr 23, 2022 EPSS Score
- Jun 20, 2022 EPSS Score
- Oct 15, 2022 EPSS Score
- Dec 12, 2022 EPSS Score
References
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1579266 url
- https://github.com/immerjs/immer/commit/fa671e55ee9bd42ae08cc239102b665a23958237 url
- https://www.ibm.com/support/pages/node/7160858 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-23436 advisory
- https://github.com/immerjs/immer package
- https://snyk.io/vuln/SNYK-JS-IMMER-1540542 url
- https://www.ibm.com/support/pages/node/7161462 advisory
- https://www.ibm.com/support/pages/node/7160961 advisory