● CVE — Critical
CVE-2026-29063
Vendorredhat, immutable-jsProductopenshift container platform, immutable, advanced cluster management for kubernetes, multicluster engine for kubernetes, satellite, openshift service mesh, quay, discovery, migration toolkit, openshift virtualization, ansible automation platform, openshift data foundation, openshift gitops, advanced cluster security, 3scale api management platform, developer hub, build of apicurio registry, logging subsystem for red hat openshift, openshift lightspeed, connectivity link, edge manager, migration toolkit for virtualization, network observability operator, openshift cluster observability operator, openshift pipelinesDiscoveredMar 6, 2026UpdatedOct 30, 2026
Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.