Vulnerability in hash project
category/bug
### Describe the bug
While working on hash project, I identified CVE-2026-29063 affecting the Immutable.js package. The vulnerability is related to prototype pollution, which occurs when certain APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() process untrusted input.
[CVE Report](https://vulert.com/vuln-scan/list/074a8be3-5e23-42a5-835e-5a1efd4f0ced?sort_order=desc&sort_by=created_at)
[CVE Link](https://vulert.com/vuln-db/CVE-2026-29063)
### To reproduce
_No response_
### Expected behavior
_No response_
### Device
_No response_
### Operating system
_No response_
### Browser
_No response_
### Additional context
_No response_
0 条评论