High severity7.5NVD Advisory· Published Jan 19, 2021· Updated Jun 17, 2026
CVE-2020-28477
CVE-2020-28477
Description
This affects all versions of package immer.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
immernpm | >= 7.0.0, < 8.0.1 | 8.0.1 |
Affected products
33- immer/immerdescription
- ghsa-coords31 versionspkg:npm/immerpkg:rpm/suse/cobbler&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/grafana-formula&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/mgr-libmod&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/mgr-osad&distro=SUSE%20Manager%20Proxy%20Module%204.1pkg:rpm/suse/mgr-osad&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/prometheus-exporters-formula&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/prometheus-formula&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/py26-compat-salt&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/rhnlib&distro=SUSE%20Manager%20Proxy%20Module%204.1pkg:rpm/suse/rhnlib&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/smdba&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Proxy%20Module%204.1pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Proxy%20Module%204.1pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/spacewalk-config&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/spacewalk-proxy&distro=SUSE%20Manager%20Proxy%20Module%204.1pkg:rpm/suse/spacewalk-proxy-installer&distro=SUSE%20Manager%20Proxy%20Module%204.1pkg:rpm/suse/spacewalk-utils&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Proxy%20Module%204.1pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/subscription-matcher&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/susemanager&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/susemanager-doc-indexes&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/susemanager-docs_en&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/susemanager-schema&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/susemanager-sls&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/xpp3&distro=SUSE%20Manager%20Server%20Module%204.1pkg:rpm/suse/xstream&distro=SUSE%20Manager%20Server%20Module%204.1
>= 7.0.0, < 8.0.1+ 30 more
- (no CPE)range: >= 7.0.0, < 8.0.1
- (no CPE)range: < 3.0.0+git20190806.32c4bae0-5.6.4
- (no CPE)range: < 0.4.0-3.6.2
- (no CPE)range: < 4.1.7-3.16.2
- (no CPE)range: < 4.1.5-2.9.4
- (no CPE)range: < 4.1.5-2.9.4
- (no CPE)range: < 0.9.0-3.19.2
- (no CPE)range: < 0.3.1-3.6.2
- (no CPE)range: < 2016.11.10-6.11.2
- (no CPE)range: < 4.1.3-4.3.2
- (no CPE)range: < 4.1.3-4.3.2
- (no CPE)range: < 1.7.8-0.3.6.2
- (no CPE)range: < 4.1.21-4.22.7
- (no CPE)range: < 4.1.21-4.22.7
- (no CPE)range: < 4.1.9-4.12.4
- (no CPE)range: < 4.1.9-4.12.4
- (no CPE)range: < 4.1.5-3.3.2
- (no CPE)range: < 4.1.30-3.31.7
- (no CPE)range: < 4.1.4-3.9.4
- (no CPE)range: < 4.1.6-3.3.2
- (no CPE)range: < 4.1.14-3.12.2
- (no CPE)range: < 4.1.23-3.18.6
- (no CPE)range: < 4.1.23-3.18.6
- (no CPE)range: < 0.26-3.6.2
- (no CPE)range: < 4.1.24-3.20.2
- (no CPE)range: < 4.1-11.28.4
- (no CPE)range: < 4.1-11.28.2
- (no CPE)range: < 4.1.19-3.24.4
- (no CPE)range: < 4.1.21-3.26.2
- (no CPE)range: < 1.1.4c-11.2.2
- (no CPE)range: < 1.4.15-3.5.2
Patches
Vulnerability mechanics
References
8- snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1061986nvdExploitThird Party AdvisoryWEB
- snyk.io/vuln/SNYK-JS-IMMER-1019369nvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-9qmh-276g-x5pjghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-28477ghsaADVISORY
- github.com/immerjs/immer/blob/master/src/plugins/patches.ts%23L213nvdBroken LinkWEB
- github.com/immerjs/immer/commit/da2bd4fa0edc9335543089fe7d290d6a346c40c5ghsaWEB
- github.com/immerjs/immer/issues/738ghsaWEB
- www.npmjs.com/package/immerghsaWEB
News mentions
0No linked articles in our index yet.