immerjs / immer

Create the next immutable state by mutating the current one

Home Page:https://immerjs.github.io/immer/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Is [CVE-2021-3757] security problem fixed?

taejs opened this issue Β· comments

commented

πŸ™‹β€β™‚ Question

CVE-2021-3757 [Risk : High]
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3757

target : immer
version : 7.0.8
description : immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') [ignore this]

I wonder if this security problem is fixed or not. If it's not, is there any plan to fix this?

commented

Hey,
This is a duplicate of CVE-2021-23436
I believe CVE-2021-3757 should be deleted.