Към съдържанието
Търсене

CVE-2026-29063: immutable-js, инжекция

8.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.

Засегнати продукти

  • immutable-js immutable-js: < 3.8.3; < 4.3.7; < 5.1.5
  • Red Hat Cluster Observability Operator 1.5.0: 1782839279 преди *
  • Red Hat Migration Toolkit for Virtualization 2.1: 1779139872 преди *
  • Red Hat Migration Toolkit for Virtualization 2.9: 1778927462 преди *
  • Red Hat multicluster engine for Kubernetes 2.1: 1777128790 преди *
  • Red Hat multicluster engine for Kubernetes 2.11: 1777559392 преди *
  • Red Hat multicluster engine for Kubernetes 2.6: 1776223790 преди *
  • Red Hat multicluster engine for Kubernetes 2.7: 1777306226 преди *
  • Red Hat multicluster engine for Kubernetes 2.8: 1775116156 преди *
  • Red Hat multicluster engine for Kubernetes 2.9: 1777301444 преди *
  • Red Hat Network Observability (NETOBSERV) 1.11.0: 1774431617 преди *
  • Red Hat Network Observability (NETOBSERV) 1.12.2: 1780920979 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: 1783451729 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15: 1776927126 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16: 1777559387 преди *
  • Red Hat Red Hat Advanced Cluster Security 4.8: 1777307791 преди *
  • Red Hat Red Hat Advanced Cluster Security 4.9: 1777986630 преди *
  • Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10: 1777976489 преди *
  • Red Hat Red Hat Developer Hub 1.8: 1776784286 преди *
  • Red Hat Red Hat Developer Hub 1.9: 1777903262 преди *
  • Red Hat Red Hat Discovery 2: 1775675922 преди *
  • Red Hat Red Hat Edge Manager 1.0: 1783502765 преди *
  • Red Hat Red Hat Edge Manager 1.1: 1784194938 преди *
  • Red Hat Red Hat Migration Toolkit 1.8: 1783690532 преди *
  • Red Hat Red Hat OpenShift AI 2.25: 1780467029 преди *
  • Red Hat Red Hat OpenShift AI 3.3: 1779189627 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.12: 1782276534 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.13: 1784055834 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.14: 1782157414 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.15: 1782127091 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.16: 1779262817 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.17: 1778517109 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.18: 1777459211 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.19: 1779256322 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.20: 1778645008 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.21: 1779266006 преди *
  • Red Hat Red Hat Openshift Data Foundation 4.18: 1783676191 преди *
  • Red Hat Red Hat Openshift Data Foundation 4.19: 1783684360 преди *
  • Red Hat Red Hat Openshift Data Foundation 4.20: 1783667125 преди *
  • Red Hat Red Hat OpenShift Pipelines 1.2: 1779910201 преди *
  • Red Hat Red Hat OpenShift Service Mesh 2.6: 1776202125 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.0: 1776151124 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.1: 1776151106 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.2: 1776155669 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.3: 1776151134 преди *
  • Red Hat Red Hat Quay 3.10: 1776736910 преди *
  • Red Hat Red Hat Quay 3.12: 1775253092 преди *
  • Red Hat Red Hat Quay 3.15: 1775169219 преди *
  • Red Hat Red Hat Quay 3.16: 1779204086 преди *
  • Red Hat Red Hat Quay 3.17: 1779922205 преди *
  • Red Hat Red Hat Quay 3.9: 1775169218 преди *
  • Red Hat Red Hat Satellite 6.18: 1781032495 преди *
  • Red Hat Logging Subsystem for Red Hat OpenShift
  • Red Hat Node HealthCheck Operator
  • Red Hat OpenShift Lightspeed
  • Red Hat OpenShift Pipelines
  • Red Hat OpenShift Service Mesh 3
  • Red Hat Red Hat 3scale API Management Platform 2
  • Red Hat Red Hat Ansible Automation Platform 2
  • Red Hat Red Hat build of Apicurio Registry 2
  • Red Hat Red Hat Connectivity Link 1
  • Red Hat Red Hat Enterprise Linux 10
  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat OpenShift AI (RHOAI)
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift GitOps
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat Satellite 6
  • Red Hat Self-service automation portal 2

Вид слабост

История

  • 6 март 2026 Публикувано

Други уязвимости в immutable-js immutable-js

Първоизточници

CVE-2026-29063: immutable-js, инжекция | freedomonline.bg