CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-59880

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.Set keep keys that share the same 32-bit hash in a HashCollisionNode collision bucket that is scanned linearly, allowing an attacker who controls keys inserted into a Map, such as through Immutable.Map(obj), Immutable.fromJS(obj), state.merge(userObject), or mergeDeep, to craft many colliding keys and degrade insertion and lookup to consume disproportionate CPU. This issue is fixed in versions 4.3.9 and 5.1.8.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 29.1%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2026-59880

Immutable-Js » Immutable » Version: 2.0.10

cpe:2.3:a:immutable-js:immutable:2.0.10
Immutable-Js » Immutable » Version: 2.0.11

cpe:2.3:a:immutable-js:immutable:2.0.11
Immutable-Js » Immutable » Version: 2.0.12

cpe:2.3:a:immutable-js:immutable:2.0.12
Immutable-Js » Immutable » Version: 2.0.13

cpe:2.3:a:immutable-js:immutable:2.0.13
Immutable-Js » Immutable » Version: 2.0.14

cpe:2.3:a:immutable-js:immutable:2.0.14
Immutable-Js » Immutable » Version: 2.0.15

cpe:2.3:a:immutable-js:immutable:2.0.15
Immutable-Js » Immutable » Version: 2.0.16

cpe:2.3:a:immutable-js:immutable:2.0.16
Immutable-Js » Immutable » Version: 2.0.17

cpe:2.3:a:immutable-js:immutable:2.0.17
Immutable-Js » Immutable » Version: 2.0.4

cpe:2.3:a:immutable-js:immutable:2.0.4
Immutable-Js » Immutable » Version: 2.0.5

cpe:2.3:a:immutable-js:immutable:2.0.5
Immutable-Js » Immutable » Version: 2.0.6

cpe:2.3:a:immutable-js:immutable:2.0.6
Immutable-Js » Immutable » Version: 2.0.7

cpe:2.3:a:immutable-js:immutable:2.0.7
Immutable-Js » Immutable » Version: 2.0.8

cpe:2.3:a:immutable-js:immutable:2.0.8
Immutable-Js » Immutable » Version: 2.0.9

cpe:2.3:a:immutable-js:immutable:2.0.9
Immutable-Js » Immutable » Version: 2.1.0

cpe:2.3:a:immutable-js:immutable:2.1.0
Immutable-Js » Immutable » Version: 2.2.0

cpe:2.3:a:immutable-js:immutable:2.2.0
Immutable-Js » Immutable » Version: 2.2.1

cpe:2.3:a:immutable-js:immutable:2.2.1
Immutable-Js » Immutable » Version: 2.2.2

cpe:2.3:a:immutable-js:immutable:2.2.2
Immutable-Js » Immutable » Version: 2.2.3

cpe:2.3:a:immutable-js:immutable:2.2.3
Immutable-Js » Immutable » Version: 2.3.0

cpe:2.3:a:immutable-js:immutable:2.3.0
Immutable-Js » Immutable » Version: 2.3.1

cpe:2.3:a:immutable-js:immutable:2.3.1
Immutable-Js » Immutable » Version: 2.3.2

cpe:2.3:a:immutable-js:immutable:2.3.2
Immutable-Js » Immutable » Version: 2.5.0

cpe:2.3:a:immutable-js:immutable:2.5.0
Immutable-Js » Immutable » Version: 2.5.1

cpe:2.3:a:immutable-js:immutable:2.5.1
Immutable-Js » Immutable » Version: 2.6.0

cpe:2.3:a:immutable-js:immutable:2.6.0
Immutable-Js » Immutable » Version: 2.6.1

cpe:2.3:a:immutable-js:immutable:2.6.1
Immutable-Js » Immutable » Version: 2.6.2

cpe:2.3:a:immutable-js:immutable:2.6.2
Immutable-Js » Immutable » Version: 3.0.0

cpe:2.3:a:immutable-js:immutable:3.0.0
Immutable-Js » Immutable » Version: 3.0.1

cpe:2.3:a:immutable-js:immutable:3.0.1
Immutable-Js » Immutable » Version: 3.0.2

cpe:2.3:a:immutable-js:immutable:3.0.2
Immutable-Js » Immutable » Version: 3.0.3

cpe:2.3:a:immutable-js:immutable:3.0.3
Immutable-Js » Immutable » Version: 3.1.0

cpe:2.3:a:immutable-js:immutable:3.1.0
Immutable-Js » Immutable » Version: 3.2.0

cpe:2.3:a:immutable-js:immutable:3.2.0
Immutable-Js » Immutable » Version: 3.2.1

cpe:2.3:a:immutable-js:immutable:3.2.1
Immutable-Js » Immutable » Version: 3.3.0

cpe:2.3:a:immutable-js:immutable:3.3.0
Immutable-Js » Immutable » Version: 3.4.0

cpe:2.3:a:immutable-js:immutable:3.4.0
Immutable-Js » Immutable » Version: 3.4.1

cpe:2.3:a:immutable-js:immutable:3.4.1
Immutable-Js » Immutable » Version: 3.5.0

cpe:2.3:a:immutable-js:immutable:3.5.0
Immutable-Js » Immutable » Version: 3.6.0

cpe:2.3:a:immutable-js:immutable:3.6.0
Immutable-Js » Immutable » Version: 3.6.1

cpe:2.3:a:immutable-js:immutable:3.6.1
Immutable-Js » Immutable » Version: 3.6.2

cpe:2.3:a:immutable-js:immutable:3.6.2
Immutable-Js » Immutable » Version: 3.6.3

cpe:2.3:a:immutable-js:immutable:3.6.3
Immutable-Js » Immutable » Version: 3.6.4

cpe:2.3:a:immutable-js:immutable:3.6.4
Immutable-Js » Immutable » Version: 3.7.0

cpe:2.3:a:immutable-js:immutable:3.7.0
Immutable-Js » Immutable » Version: 3.7.1

cpe:2.3:a:immutable-js:immutable:3.7.1
Immutable-Js » Immutable » Version: 3.7.2

cpe:2.3:a:immutable-js:immutable:3.7.2
Immutable-Js » Immutable » Version: 3.7.3

cpe:2.3:a:immutable-js:immutable:3.7.3
Immutable-Js » Immutable » Version: 3.7.4

cpe:2.3:a:immutable-js:immutable:3.7.4
Immutable-Js » Immutable » Version: 3.7.5

cpe:2.3:a:immutable-js:immutable:3.7.5
Immutable-Js » Immutable » Version: 3.7.6

cpe:2.3:a:immutable-js:immutable:3.7.6
Immutable-Js » Immutable » Version: 3.8.0

cpe:2.3:a:immutable-js:immutable:3.8.0
Immutable-Js » Immutable » Version: 3.8.1

cpe:2.3:a:immutable-js:immutable:3.8.1
Immutable-Js » Immutable » Version: 3.8.2

cpe:2.3:a:immutable-js:immutable:3.8.2
Immutable-Js » Immutable » Version: 3.8.3

cpe:2.3:a:immutable-js:immutable:3.8.3
Immutable-Js » Immutable » Version: 4.0.0

cpe:2.3:a:immutable-js:immutable:4.0.0
Immutable-Js » Immutable » Version: 4.1.0

cpe:2.3:a:immutable-js:immutable:4.1.0
Immutable-Js » Immutable » Version: 4.2.0

cpe:2.3:a:immutable-js:immutable:4.2.0
Immutable-Js » Immutable » Version: 4.2.1

cpe:2.3:a:immutable-js:immutable:4.2.1
Immutable-Js » Immutable » Version: 4.2.2

cpe:2.3:a:immutable-js:immutable:4.2.2
Immutable-Js » Immutable » Version: 4.2.3

cpe:2.3:a:immutable-js:immutable:4.2.3
Immutable-Js » Immutable » Version: 4.2.4

cpe:2.3:a:immutable-js:immutable:4.2.4
Immutable-Js » Immutable » Version: 4.3.0

cpe:2.3:a:immutable-js:immutable:4.3.0
Immutable-Js » Immutable » Version: 4.3.1

cpe:2.3:a:immutable-js:immutable:4.3.1
Immutable-Js » Immutable » Version: 4.3.2

cpe:2.3:a:immutable-js:immutable:4.3.2
Immutable-Js » Immutable » Version: 4.3.3

cpe:2.3:a:immutable-js:immutable:4.3.3
Immutable-Js » Immutable » Version: 4.3.4

cpe:2.3:a:immutable-js:immutable:4.3.4
Immutable-Js » Immutable » Version: 4.3.5

cpe:2.3:a:immutable-js:immutable:4.3.5
Immutable-Js » Immutable » Version: 4.3.6

cpe:2.3:a:immutable-js:immutable:4.3.6
Immutable-Js » Immutable » Version: 4.3.7

cpe:2.3:a:immutable-js:immutable:4.3.7
Immutable-Js » Immutable » Version: 4.3.8

cpe:2.3:a:immutable-js:immutable:4.3.8
Immutable-Js » Immutable » Version: 5.0.0

cpe:2.3:a:immutable-js:immutable:5.0.0
Immutable-Js » Immutable » Version: 5.0.1

cpe:2.3:a:immutable-js:immutable:5.0.1
Immutable-Js » Immutable » Version: 5.0.2

cpe:2.3:a:immutable-js:immutable:5.0.2
Immutable-Js » Immutable » Version: 5.0.3

cpe:2.3:a:immutable-js:immutable:5.0.3
Immutable-Js » Immutable » Version: 5.1.0

cpe:2.3:a:immutable-js:immutable:5.1.0
Immutable-Js » Immutable » Version: 5.1.1

cpe:2.3:a:immutable-js:immutable:5.1.1
Immutable-Js » Immutable » Version: 5.1.2

cpe:2.3:a:immutable-js:immutable:5.1.2
Immutable-Js » Immutable » Version: 5.1.3

cpe:2.3:a:immutable-js:immutable:5.1.3
Immutable-Js » Immutable » Version: 5.1.4

cpe:2.3:a:immutable-js:immutable:5.1.4
Immutable-Js » Immutable » Version: 5.1.5

cpe:2.3:a:immutable-js:immutable:5.1.5
Immutable-Js » Immutable » Version: 5.1.6

cpe:2.3:a:immutable-js:immutable:5.1.6
Immutable-Js » Immutable » Version: 5.1.7

cpe:2.3:a:immutable-js:immutable:5.1.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-59880

Products

Pricing

Contact Us