ITADN

Vulnerability in hash project

#8511Openankitdn 创建于 2026-03-06
category/bug
A
ankitdncommented
### Describe the bug While working on hash project, I identified CVE-2026-29063 affecting the Immutable.js package. The vulnerability is related to prototype pollution, which occurs when certain APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() process untrusted input. [CVE Report](https://vulert.com/vuln-scan/list/074a8be3-5e23-42a5-835e-5a1efd4f0ced?sort_order=desc&sort_by=created_at) [CVE Link](https://vulert.com/vuln-db/CVE-2026-29063) ### To reproduce _No response_ ### Expected behavior _No response_ ### Device _No response_ ### Operating system _No response_ ### Browser _No response_ ### Additional context _No response_
0 条评论