Immutable vulnerabilities

2 known vulnerabilities in Immutable from Immutable-js. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  immutable-js: Integer Overflow or Wraparound

  CVE-2026-59879Jul 8, 2026Immutable-js

  Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 ** 31 in setListBound

• 7.5 High severity

  immutable-js: Inefficient Algorithmic Complexity

  CVE-2026-59880Jul 8, 2026Immutable-js

  Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.Set keep keys that share the same 32-bit hash in a HashCollisionNode collision bucket that is scanned linearly, allowing an attacker who cont