← All advisories

Critical severity9.8NVD Advisory· Published Sep 2, 2021· Updated Jun 17, 2026

CVE-2021-3757

CVE-2021-3757

Description

immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
immernpm	>= 7.0.0, < 9.0.6	9.0.6

Affected products

3

Immer Project/Immer
cpe:2.3:a:immer_project:immer:*:*:*:*:*:node.js:*:*
Range: <=9.0.5
ghsa-coords
pkg:npm/immer
Range: >= 7.0.0, < 9.0.6
immerjs/immercpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/immerjs/immer/commit/fa671e55ee9bd42ae08cc239102b665a23958237nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/23d38099-71cd-42ed-a77a-71e68094adfanvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-c36v-fmgq-m8hxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-3757ghsaADVISORY

News mentions

0

No linked articles in our index yet.