CVE-2026-29063 - Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ...

CVE ID : CVE-2026-29063 Published : March 6, 2026, 6:25 p.m. | 39 minutes ago Description : Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...