Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-06 | 3 | Disclosure3 |
| 2026-03-24 | 2 | Disclosure2 |
IBM WebSphere Application Server Liberty is affected by a prototype pollution vulnerability due to immutable (CVE-2026-29063) https://tinyurl.com/25lyxhlz
Post summary
CVE-2026-29063 is a prototype‑pollution vulnerability affecting IBM WebSphere Application Server Liberty, but the tweet offers no evidence of active exploitation, PoCs, or remediation guidance.
PH70510:WebSphere Liberty is affected by a prototype pollution vulnerability due to immutable (CVE-2026-29063 CVSS 8.7) https://tinyurl.com/27tvd2v2
Post summary
WebSphere Liberty is reported to have a prototype‑pollution flaw (CVE‑2026‑29063) with a CVSS score of 8.7; no PoC, exploit, or patch information is disclosed.
CVE-2026-29063 Prototype Pollution Vulnerability in Immutable.js Before 3.8.3, 4.3.7, and 5.1.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29063
Post summary
A new prototype pollution vulnerability was disclosed for Immutable.js versions prior to 3.8.3, 4.3.7, and 5.1.5, with no additional details about proof‑of‑concept, exploit, or patch provided.
CVE-2026-29063 Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the merge… https://www.cve.org/CVERecord?id=CVE-2026-29063
Post summary
The provided text announces CVE‑2026‑29063 as a Prototype Pollution flaw in Immutable.js affecting specific versions, with no evidence of PoC, exploit, active attacks, or patches disclosed.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-29063 - Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable Intel Report: https://ift.tt/BY5lQGv
Post summary
The alert announces CVE-2026-29063, a prototype‑pollution flaw in Immutable.js, but provides no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | immutable-js | immutable | - | node.js | - |