`immutable`

Ecosystem:
npm

Package URL:
pkg:npm/immutable

Total PRs:
1,868 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
1,327 repositories

Unique Repos (30 days):
9 repositories

Security Advisories

Immutabl: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

GHSA-xvcm-6775-5m9r CVE-2026-59880 HIGH published 2 days ago • updated 1 day ago

## Summary `Immutable.Map` and `Immutable.Set` keep keys that share the same 32-bit hash in a collision bucket that is scanned linearly. The strin...

5.1.5 → 5.1.9 Patch PR

Closed 13 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates

ai-shifu/ai-shifu #2014

5.1.3 → 5.1.9 Patch PR

Closed 22 days ago 1 comment

chore(deps): bump immutable from 5.1.4 to 5.1.7 in /WORKINPROGRESS/tauri-desktop-app

jtgsystems/seo-image-converter #59

5.1.4 → 5.1.7 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 2 directories with 26 updates

batuhan-basoglu/Hospital-Management-System #128

4.0.0-rc.12 → 4.3.8 Minor PR

Closed about 1 month ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 18 updates

mkusaka/bun #3

5.1.3 → 5.1.5 Patch PR

Closed about 1 month ago 1 comment

⬆️ Bump the npm_and_yarn group across 1 directory with 8 updates

greengiraffe/wingspan-helper #33

5.1.1 → 5.1.6 Patch PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 18 updates

gagneet/firefly-iii #12

5.1.3 → 5.1.6 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

alexcolls/p2p-wallet-web #31

4.0.0 → 4.1.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump immutable from 4.3.7 to 4.3.8

eclipse-thingweb/website #168

4.3.7 → 4.3.8 Patch PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 18 updates

gagneet/firefly-iii #11

5.1.3 → 5.1.5 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 22 updates

huynguyenjv/VN-Law #33

5.0.3 → 5.1.5 Minor PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 12 updates

tcpipuk/maubot #32

5.1.3 → 5.1.5 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the web-npm-security-minor-patch group across 1 directory with 23 updates

elkozmon/zoonavigator #159

5.1.3 → 5.1.5 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 4 directories with 27 updates

kinghua0629/chromium #11

4.1.0 → 4.3.8 Minor PR

Closed 2 months ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 19 updates

DesarrolloORT/ngx-whats-new #68

5.1.1 → 5.1.5 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 15 directories with 24 updates

1042422227/react #9

4.0.0-rc.12 → 4.3.8 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 17 updates

Dargon789/web3.js #79

4.1.0 → 4.3.8 Minor PR

Closed 2 months ago 2 comments

deps: bump immutable from 4.3.8 to 5.1.5

cisco-open/cisco-mcpclient-app #13

4.3.8 → 5.1.5 Major PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 19 updates

Arcane-Fly/bolt.diy #29

5.1.3 → 5.1.5 Patch PR

Closed 2 months ago 3 comments

build(deps): bump the npm_and_yarn group across 1 directory with 10 updates

roostorg/osprey #278

5.1.3 → 5.1.5 Patch PR

Closed 2 months ago 1 comment

Bump immutable from 5.1.4 to 5.1.5 in /quartz

cal-itp/central_docs #6

5.1.4 → 5.1.5 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates

Satelink-Protocol/Satelink_Network #63

4.3.0 → 4.3.8 Patch PR

Closed 2 months ago 3 comments

build(deps): bump the security-all group across 1 directory with 30 updates

seven-io/desktop #30

4.3.0 → 4.3.8 Patch PR

Closed 2 months ago 1 comment

chore: Bump the npm_and_yarn group across 1 directory with 14 updates

facioquo/stock-charts #478

5.1.4 → 5.1.5 Patch PR

Closed 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 31 updates

Reality2byte/metamask-mobile #766

4.3.7 → 4.3.8 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 17 updates

Rytass/Utils #193

5.1.3 → 5.1.5 Patch PR

Closed 2 months ago 2 comments

Bump immutable from 5.1.4 to 5.1.5

ahampriyanshu/ahampriyanshu.github.io #20

5.1.4 → 5.1.5 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 21 updates

cptthura-alt/supabase-js #41

5.1.3 → 5.1.5 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 11 updates

servrox-solutions/safe-complete-services #19

4.1.0 → 4.3.8 Minor PR

Closed 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 16 updates

Dargon789/web3.js #75

4.1.0 → 4.3.8 Minor PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 20 updates

erikside/scaff #9

4.3.4 → 4.3.8 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 5 directories with 15 updates

HunterSides/excalidraw #34

4.3.5 → 4.3.8 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 18 updates

BeulahPerry/scaffold-eth-2----scaffold-eth #54

4.3.4 → 4.3.8 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 25 updates

ZoneCog/zone.bolt #32

5.0.3 → 5.1.5 Minor PR

Closed 2 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 16 updates

fat-fuzzy/rocks #996

5.1.3 → 5.1.5 Patch PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 11 directories with 18 updates

CaffeeLake/bun #333

5.1.3 → 5.1.5 Patch PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 11 directories with 17 updates

CaffeeLake/bun #332

5.1.3 → 5.1.5 Patch PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 16 updates

USOchainURC20/USOchain #27

4.3.7 → 4.3.8 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 21 updates

dfinity/dre #2008

3.8.2 → 3.8.3 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 15 updates

aquia-inc/template-vite-react #397

5.0.2 → 5.1.5 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 20 updates

Surfndez/bun #27

5.1.3 → 5.1.5 Patch PR

Closed 2 months ago 1 comment

build(deps): Bump the npm_and_yarn group across 1 directory with 17 updates

gonzafg2/Media-Capture-Project #2

4.3.2 → 4.3.8 Patch PR

Closed 2 months ago 2 comments

build(deps): bump immutable from 4.0.0 to 4.3.8

tomickigrzegorz/voter #30

4.0.0 → 4.3.8 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

sotashimozono/obsidian-remote-ssh #282

5.1.4 → 5.1.5 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

toondeboer/Investments-Tracker #23

5.0.3 → 5.1.5 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 17 updates

Akusher23/web3.js #23

4.1.0 → 4.3.8 Minor PR

Closed 3 months ago 1 comment

Bump immutable from 5.1.4 to 5.1.5

yeatmanlab/roar-dashboard #1751

5.1.4 → 5.1.5 Patch PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 24 updates

reaphq/iam-identity-center-team #37

4.3.0 → 4.3.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 19 updates

cv-gh/computeruse #18

5.1.2 → 5.1.5 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 30 updates

hirehamir/brave-core #22

4.0.0 → 4.3.8 Minor PR

Closed 3 months ago 1 comment

Package Details

Name:	`immutable`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/immutable`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 3

View All npm Advisories

Package Information

Description:

Immutable Data Collections

Repository:	https://github.com/immutable-js/immutable-js
Homepage:	https://immutable-js.com
Latest Release:	`5.1.2` about 1 year ago
Dependent Repos:	878,497
Dependent Packages:	8,975
Downloads:	104,070,855
Ranking:	Top 0.0382% by dependent repos Top 0.0233% by downloads Top 0.0107% by dependent pkgs

PR Status

Open 920 (49.3%)

Merged 39 (2.1%)

Closed 886 (47.5%)

PR Types

Major 92 (4.9%)

Minor 435 (23.3%)

Patch 1,314 (70.4%)

Removal 4 (0.2%)

immutable

Security Advisories

Immutabl: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

Immutable is vulnerable to Prototype Pollution

Recent PRs (filtered by: Closed )

Package Details

Security Advisories

3

Package Information

PR Status

PR Types

`immutable`