Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
30 Oct 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2026:11070 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:11217 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:11414 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:11858 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:11916 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:12118 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:13542 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:13548 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:13791 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:13826 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:13829 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:13847 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:13853 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:17469 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:17598 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19375 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19409 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19410 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:19712 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:20034 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:20041 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:20042 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:20088 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:21657 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:21658 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:21703 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:21931 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:22465 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:23246 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:24473 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:24977 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:26225 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:26232 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27063 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:28893 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:28964 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:29857 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:29864 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:34049 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:34099 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:34100 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:34342 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:36621 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:36651 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:36882 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:40022 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:40118 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:40945 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:40984 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:41928 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:41941 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:41944 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:6428 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:6568 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:6720 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:6926 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:7329 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:8218 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:8483 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:8484 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:8490 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:8491 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:8493 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:9742 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:9848 - Vendor Advisory | |
| References | () https://access.redhat.com/security/cve/CVE-2026-29063 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2445291 - Issue Tracking, Vendor Advisory | |
| References | () https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29063.json - Vendor Advisory | |
| First Time |
Redhat migration Toolkit
Redhat edge Manager Redhat logging Subsystem For Red Hat Openshift Redhat openshift Gitops Redhat openshift Data Foundation Redhat 3scale Api Management Platform Redhat discovery Redhat multicluster Engine For Kubernetes Redhat build Of Apicurio Registry Redhat migration Toolkit For Virtualization Redhat quay Redhat enterprise Linux Redhat advanced Cluster Security Redhat satellite Redhat advanced Cluster Management For Kubernetes Redhat openshift Pipelines Redhat self-service Automation Portal Redhat connectivity Link Redhat openshift Lightspeed Redhat openshift Service Mesh Redhat developer Hub Redhat Redhat openshift Virtualization Redhat openshift Cluster Observability Operator Redhat ansible Automation Platform Redhat network Observability Operator Redhat openshift Container Platform |
|
| CPE | cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_cluster_observability_operator:1.5.3:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_service_mesh:3.1:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:migration_toolkit_for_virtualization:2.9.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_service_mesh:3.3:*:*:*:*:*:*:* cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:migration_toolkit:1.8:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_service_mesh:2.6:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:self-service_automation_portal:2.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:edge_manager:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_data_foundation:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_data_foundation:4.17:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_service_mesh:3.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:3scale_api_management_platform:2.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:logging_subsystem_for_red_hat_openshift:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:quay:3.18.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_service_mesh:3.2:*:*:*:*:*:*:* cpe:2.3:a:redhat:advanced_cluster_security:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:migration_toolkit_for_virtualization:2.10.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:build_of_apicurio_registry:2.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:network_observability_operator:1.12.3:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_pipelines:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:developer_hub:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:connectivity_link:1.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:satellite:6.18:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_lightspeed:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:advanced_cluster_security:*:*:*:*:*:kubernetes:*:* cpe:2.3:a:redhat:network_observability_operator:1.11.0:*:*:*:*:*:*:* |
Information
Published : 2026-03-06 19:16
Updated : 2026-10-30 13:16
NVD link : CVE-2026-29063
Mitre link : CVE-2026-29063
CVE.ORG link : CVE-2026-29063
JSON object : View
Products Affected
redhat
- connectivity_link
- openshift_container_platform
- openshift_pipelines
- openshift_lightspeed
- 3scale_api_management_platform
- enterprise_linux
- migration_toolkit
- build_of_apicurio_registry
- self-service_automation_portal
- logging_subsystem_for_red_hat_openshift
- openshift_data_foundation
- openshift_virtualization
- openshift_gitops
- advanced_cluster_security
- developer_hub
- multicluster_engine_for_kubernetes
- ansible_automation_platform
- advanced_cluster_management_for_kubernetes
- satellite
- openshift_service_mesh
- migration_toolkit_for_virtualization
- edge_manager
- discovery
- quay
- network_observability_operator
- openshift_cluster_observability_operator
immutable-js
- immutable
