Skip to content
OpenAdvisories
High · 7.5 CVE-2020-28477 EUVD-2021-0500GHSA-9qmh-276g-x5pj

Prototype Pollution

Published Jan 19, 2021 · Updated Sep 17, 2024 · Assigned by snyk

Package: immer Ecosystem: npm

Description

This affects all versions of package immer.

Affected products

VendorProductAffectedFixed
— immer < unspecified unspecified

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Rhev Manager 4 ovirt-web-ui 1.6.7-1.el8ev RHSA-2021:1169
Red Hat Rhev Manager 4 rhvm +19 4.4.5.9-0.1.el8ev RHSA-2021:1169

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Manager Server Module 4.1 cobbler 3.0.0+git20190806.32c4bae0-5.6.4 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 grafana-formula 0.4.0-3.6.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 mgr-libmod 4.1.7-3.16.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 mgr-osad 4.1.5-2.9.4 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 prometheus-exporters-formula 0.9.0-3.19.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 prometheus-formula 0.3.1-3.6.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 py26-compat-salt 2016.11.10-6.11.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 rhnlib 4.1.3-4.3.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 smdba 1.7.8-0.3.6.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 spacewalk-backend 4.1.21-4.22.7 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 spacewalk-client-tools 4.1.9-4.12.4 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 spacewalk-config 4.1.5-3.3.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 spacewalk-java 4.1.30-3.31.7 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 spacewalk-utils 4.1.14-3.12.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 spacewalk-web 4.1.23-3.18.6 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 subscription-matcher 0.26-3.6.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 susemanager 4.1.24-3.20.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 susemanager-doc-indexes 4.1-11.28.4 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 susemanager-docs_en 4.1-11.28.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 susemanager-schema 4.1.19-3.24.4 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 susemanager-sls 4.1.21-3.26.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 xpp3 1.1.4c-11.2.2 SUSE-SU-2021:0906-1
SUSE Manager Server Module 4.1 xstream 1.4.15-3.5.2 SUSE-SU-2021:0906-1
SUSE Manager Proxy Module 4.1 mgr-osad 4.1.5-2.9.4 SUSE-SU-2021:0906-1
SUSE Manager Proxy Module 4.1 rhnlib 4.1.3-4.3.2 SUSE-SU-2021:0906-1
SUSE Manager Proxy Module 4.1 spacewalk-backend 4.1.21-4.22.7 SUSE-SU-2021:0906-1
SUSE Manager Proxy Module 4.1 spacewalk-client-tools 4.1.9-4.12.4 SUSE-SU-2021:0906-1
SUSE Manager Proxy Module 4.1 spacewalk-proxy 4.1.4-3.9.4 SUSE-SU-2021:0906-1
SUSE Manager Proxy Module 4.1 spacewalk-proxy-installer 4.1.6-3.3.2 SUSE-SU-2021:0906-1
SUSE Manager Proxy Module 4.1 spacewalk-web 4.1.23-3.18.6 SUSE-SU-2021:0906-1

Affected packages

EcosystemPackageAffectedFixedRecord
npm immer >= 7.0.0, < 8.0.1 8.0.1 GHSA-9qmh-276g-x5pj

Advisories 3

References