Prototype Pollution in Immutable.js v<3.8.3/4.3.7/5.1.5 via mergeDeep API
CVE-2026-29063 Published on March 6, 2026

Vulnerability Analysis

Weakness Types

Products Associated with CVE-2026-29063

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Affected Versions

immutable-js:

• Version < 3.8.3 is affected.
• Version < 4.3.7 is affected.
• Version < 5.1.5 is affected.

Red Hat Cluster Observability Operator 1.5.0:

• Version 1782839279 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

• Version 1782840539 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

• Version 1782839996 and below * is unaffected.

Red Hat Migration Toolkit for Virtualization 2.1:

• Version 1779139872 and below * is unaffected.

Red Hat Migration Toolkit for Virtualization 2.9:

• Version 1778927462 and below * is unaffected.

Red Hat multicluster engine for Kubernetes 2.1:

• Version 1777128790 and below * is unaffected.

Red Hat multicluster engine for Kubernetes 2.11.0:

• Version 1777559392 and below * is unaffected.

Red Hat multicluster engine for Kubernetes 2.6:

• Version 1776223790 and below * is unaffected.

Red Hat multicluster engine for Kubernetes 2.7:

• Version 1777306226 and below * is unaffected.

Red Hat multicluster engine for Kubernetes 2.8:

• Version 1775116156 and below * is unaffected.

Red Hat multicluster engine for Kubernetes 2.9:

• Version 1777301444 and below * is unaffected.

Red Hat Network Observability (NETOBSERV) 1.11.2:

• Version 1774431617 and below * is unaffected.

Red Hat Network Observability (NETOBSERV) 1.12.0:

• Version 1780920979 and below * is unaffected.

Red Hat Advanced Cluster Management for Kubernetes 2.14:

• Version 1783451729 and below * is unaffected.

Red Hat Advanced Cluster Management for Kubernetes 2.15:

• Version 1776927126 and below * is unaffected.

Red Hat Advanced Cluster Management for Kubernetes 2.16:

• Version 1777559387 and below * is unaffected.

Red Hat Advanced Cluster Security 4.8:

• Version 1777307791 and below * is unaffected.

Red Hat Advanced Cluster Security 4.9:

• Version 1777986630 and below * is unaffected.

Red Hat Advanced Cluster Security for Kubernetes 4.10:

• Version 1777976489 and below * is unaffected.

Red Hat Developer Hub 1.8:

• Version 1776784286 and below * is unaffected.

Red Hat Developer Hub 1.9:

• Version 1777903262 and below * is unaffected.

Red Hat Discovery 2:

• Version 1775675922 and below * is unaffected.

Red Hat Edge Manager 1.0:

• Version 1783502765 and below * is unaffected.

Red Hat Edge Manager 1.0:

• Version 1783502438 and below * is unaffected.

Red Hat Edge Manager 1.1:

• Version 1784194938 and below * is unaffected.

Red Hat Edge Manager 1.1:

• Version 1784194574 and below * is unaffected.

Red Hat Edge Manager 1.1:

• Version 1784126822 and below * is unaffected.

Red Hat Edge Manager 1.1:

• Version 1784127736 and below * is unaffected.

Red Hat Migration Toolkit 1.8:

• Version 1783690532 and below * is unaffected.

Red Hat OpenShift AI 2.25:

• Version 1780467029 and below * is unaffected.

Red Hat OpenShift AI 2.25:

• Version 1780467147 and below * is unaffected.

Red Hat OpenShift AI 3.3:

• Version 1779189627 and below * is unaffected.

Red Hat OpenShift AI 3.3:

• Version 1778473763 and below * is unaffected.

Red Hat OpenShift AI 3.3:

• Version 1778666987 and below * is unaffected.

Red Hat OpenShift Container Platform 4.12:

• Version 1782276534 and below * is unaffected.

Red Hat OpenShift Container Platform 4.13:

• Version 1784055834 and below * is unaffected.

Red Hat OpenShift Container Platform 4.14:

• Version 1782157414 and below * is unaffected.

Red Hat OpenShift Container Platform 4.15:

• Version 1782127091 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

• Version 1779262817 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

• Version 1778615276 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

• Version 1783306715 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

• Version 1778517109 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

• Version 1782240573 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

• Version 1782240332 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

• Version 1782269794 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

• Version 1777459211 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

• Version 1779874891 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

• Version 1779874967 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

• Version 1782259588 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

• Version 1779256322 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

• Version 1779249920 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

• Version 1780503846 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

• Version 1782171676 and below * is unaffected.

Red Hat OpenShift Container Platform 4.20:

• Version 1778645008 and below * is unaffected.

Red Hat OpenShift Container Platform 4.20:

• Version 1779863939 and below * is unaffected.

Red Hat OpenShift Container Platform 4.20:

• Version 1781688743 and below * is unaffected.

Red Hat OpenShift Container Platform 4.21:

• Version 1779266006 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783676191 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783929816 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1784094353 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1784093953 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1784094943 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783676585 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783676649 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783676675 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1784094299 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1784094725 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783676820 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783676883 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783676894 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1784095175 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783676977 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1784093503 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783677297 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783677345 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

• Version 1783677533 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783684360 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783684068 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1784054582 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1784054606 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1784055295 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783684603 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783684668 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783684667 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1784054873 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783684707 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1784055589 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783684779 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783684831 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783684839 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1784055533 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1784055558 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1784056134 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783685128 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783685129 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

• Version 1783685375 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783667125 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783666755 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1784054598 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1784055387 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1784055726 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783667517 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783667577 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783667611 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1784055020 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783667641 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1784055586 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783667790 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783667859 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783667875 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783667869 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783667877 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1784055576 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1784055244 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1784055382 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783668266 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783668288 and below * is unaffected.

Red Hat Openshift Data Foundation 4.2:

• Version 1783669219 and below * is unaffected.

Red Hat OpenShift Pipelines 1.2:

• Version 1779910201 and below * is unaffected.

Red Hat OpenShift Service Mesh 2.6:

• Version 1776202125 and below * is unaffected.

Red Hat OpenShift Service Mesh 2.6:

• Version 1776191302 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.0:

• Version 1776151124 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.0:

• Version 1776151272 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.1:

• Version 1776151106 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.1:

• Version 1776151270 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.2:

• Version 1776155669 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.2:

• Version 1776149682 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.3:

• Version 1776151134 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.3:

• Version 1776151277 and below * is unaffected.

Red Hat Quay 3.1:

• Version 1776736910 and below * is unaffected.

Red Hat Quay 3.12:

• Version 1775253092 and below * is unaffected.

Red Hat Quay 3.15:

• Version 1775169219 and below * is unaffected.

Red Hat Quay 3.16:

• Version 1779204086 and below * is unaffected.

Red Hat Quay 3.17:

• Version 1779922205 and below * is unaffected.

Red Hat Quay 3.9:

• Version 1775169218 and below * is unaffected.

Red Hat Satellite 6.18:

• Version 1781032495 and below * is unaffected.

Red Hat Satellite 6.18:

• Version 1780105179 and below * is unaffected.

Logging Subsystem for Red Hat OpenShift: Red Hat Node HealthCheck Operator: Red Hat Node HealthCheck Operator: Red Hat Node HealthCheck Operator: Red Hat Node HealthCheck Operator: Red Hat Node HealthCheck Operator: Red Hat OpenShift Lightspeed: Red Hat OpenShift Lightspeed: Red Hat OpenShift Pipelines: Red Hat OpenShift Service Mesh 3: Red Hat OpenShift Service Mesh 3: Red Hat 3scale API Management Platform 2: Red Hat 3scale API Management Platform 2: Red Hat 3scale API Management Platform 2: Red Hat 3scale API Management Platform 2: Red Hat 3scale API Management Platform 2: Red Hat 3scale API Management Platform 2: Red Hat 3scale API Management Platform 2: Red Hat 3scale API Management Platform 2: Red Hat 3scale API Management Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat build of Apicurio Registry 2: Red Hat Connectivity Link 1: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift Container Platform 4: Red Hat OpenShift GitOps: Red Hat OpenShift GitOps: Red Hat OpenShift GitOps: Red Hat OpenShift Virtualization 4: Red Hat Satellite 6: Red Hat Satellite 6: Red Hat Self-service automation portal 2:

Exploit Probability