VDB
Sign up
HIGH7.5

GHSA-c36v-fmgq-m8hx

Prototype Pollution in immer

Quick fix

GHSA-c36v-fmgq-m8hx — immer: upgrade to the fixed version with the command below.

npm install immer@9.0.6

Details

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/immer
Introduced in: 7.0.0Fixed in: 9.0.6
Fixnpm install immer@9.0.6

References