Prototype Pollution in immer - immer

Description

Affected versions of immer are vulnerable to Prototype Pollution.

Recommendation

Update the immer package to the latest compatible version. Followings are version details:

• Affected version(s): >= 7.0.0, < 8.0.1
• Patched version(s): 8.0.1

References

• GHSA-9qmh-276g-x5pj
• snyk.io
• www.npmjs.com
• CVE-2020-28477
• CWE-471
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Prototype pollution in json-pointer - json-pointer - CVE-2020-7709
• Prototype pollution in pathval - CVE-2020-7751
• Prototype pollution in gsap - CVE-2020-28478
• Prototype pollution in json8 - CVE-2020-7770

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

immer