Threats Tagged 'ghsa-xvcm-6775-5m9r'
View all threats tagged with 'ghsa-xvcm-6775-5m9r'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-xvcm-6775-5m9r'
Click on any threat for detailed analysis and mitigation recommendations
0 Immutable.js versions through 5.1.7 have a denial of service vulnerability due to a hash-collision algorithmic complexity issue in Immutable.Map and Immutable.Set. Attackers controlling keys inserted into these structures can craft many keys with identical 32-bit hashes, causing insertion and lookup operations to degrade from O(1) to O(n) and resulting in O(n²) complexity for building or reading the entire set. This can consume excessive CPU and stall single-threaded runtimes like Node.js, causing denial of service. The issue is fixed in version 5.1.8 by introducing a per-process seeded secondary hash to index large collision buckets, restoring near-linear performance. Workarounds include limiting request body size and object key counts before passing untrusted data to Immutable.js. Join the discussion | GCVE Database | 07/21/2026, 19:02:33 UTC Added: 07/22/2026, 00:11:53 UTC |
Showing 1 to 1 of 1 result