Register | Log in

node-immutable

Immutable Data Collections

Choose email to subscribe with

general

source: node-immutable (main)
version: 4.3.8-2
maintainer: Debian Javascript Maintainers (archive) (DMD)
uploaders: Pirate Praveen [DMD]
arch: all
std-ver: 4.7.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.8.2+dfsg-3
oldstable: 4.1.0-3
stable: 4.3.4-1
testing: 4.3.4-1
unstable: 4.3.8-2

versioned links

3.8.2+dfsg-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.1.0-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.3.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.3.8-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

node-immutable

action needed

A new upstream version is available: 5.1.5 high

A new upstream version 5.1.5 is available, you should consider packaging it.

Created: 2025-11-27 Last update: 2026-03-12 01:00

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2026-29063: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.

Created: 2026-03-06 Last update: 2026-03-09 12:49

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-29063: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.

Created: 2026-03-06 Last update: 2026-03-09 12:49

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2026-29063: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.

Created: 2026-03-06 Last update: 2026-03-09 12:49

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2026-29063: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.

Created: 2026-03-06 Last update: 2026-03-09 12:49

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2025-09-11 Last update: 2025-09-11 04:33

debian/patches: 1 patch to forward upstream low

Among the 4 debian patches available in version 4.3.8-2 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-03-09 13:30

testing migrations

excuses:
- Migration status for node-immutable (4.3.4-1 to 4.3.8-2): Waiting for test results or another package, or too young (no action required now - check later)
- Issues preventing migration:
- ∙ ∙ Autopkgtest for node-immutable/4.3.8-2: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Test triggered
- ∙ ∙ Autopkgtest for node-jsan/3.1.14+~3.1.3-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Test triggered, riscv64: Pass, s390x: Test triggered
- ∙ ∙ Autopkgtest for node-performance-now/2.1.0+debian-6: amd64: Pass, arm64: No tests, superficial or marked flaky ♻ (reference ♻), i386: No tests, superficial or marked flaky ♻, ppc64el: Test triggered, riscv64: No tests, superficial or marked flaky ♻, s390x: Test triggered
- ∙ ∙ Autopkgtest for node-redux-devtools/3.13.1~git20230831-2: amd64: No tests, superficial or marked flaky ♻ (reference ♻), arm64: No tests, superficial or marked flaky ♻ (reference ♻), i386: No tests, superficial or marked flaky ♻ (reference ♻), ppc64el: Test triggered, riscv64: No tests, superficial or marked flaky ♻, s390x: Test triggered
- ∙ ∙ Too young, only 3 of 5 days old
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/n/node-immutable.html
- ∙ ∙ Reproduced on amd64
- ∙ ∙ Reproduced on arm64
- ∙ ∙ Reproduced on armhf
- ∙ ∙ Reproduced on i386
- ∙ ∙ Reproduced on ppc64el
- Not considered

news

[2026-03-09] Accepted node-immutable 4.3.8-2 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2026-03-09] Accepted node-immutable 4.3.8-1 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2023-10-14] node-immutable 4.3.4-1 MIGRATED to testing (Debian testing watch)
[2023-10-14] node-immutable 4.3.4-1 MIGRATED to testing (Debian testing watch)
[2023-10-11] Accepted node-immutable 4.3.4-1 (source) into unstable (Ananthu C V) (signed by: Xavier Guimard)
[2022-10-29] node-immutable 4.1.0-3 MIGRATED to testing (Debian testing watch)
[2022-10-26] Accepted node-immutable 4.1.0-3 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2022-09-23] node-immutable 4.1.0-2 MIGRATED to testing (Debian testing watch)
[2022-09-20] Accepted node-immutable 4.1.0-2 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2022-08-02] node-immutable 4.1.0-1 MIGRATED to testing (Debian testing watch)
[2022-07-27] Accepted node-immutable 4.1.0-1 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2022-06-04] node-immutable 4.0.0-4 MIGRATED to testing (Debian testing watch)
[2022-06-01] Accepted node-immutable 4.0.0-4 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2022-03-31] node-immutable 4.0.0-3 MIGRATED to testing (Debian testing watch)
[2022-03-29] Accepted node-immutable 4.0.0-3 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2021-12-31] node-immutable 4.0.0-2 MIGRATED to testing (Debian testing watch)
[2021-12-29] Accepted node-immutable 4.0.0-2 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2021-11-11] node-immutable 4.0.0-1 MIGRATED to testing (Debian testing watch)
[2021-11-09] Accepted node-immutable 4.0.0-1 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2019-12-02] Accepted node-immutable 3.8.2+dfsg-3~bpo10+1 (source all) into buster-backports, buster-backports (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2019-10-02] node-immutable 3.8.2+dfsg-3 MIGRATED to testing (Debian testing watch)
[2019-09-27] Accepted node-immutable 3.8.2+dfsg-3 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2019-09-26] Accepted node-immutable 3.8.2+dfsg-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2019-09-25] Accepted node-immutable 3.8.2+dfsg-1 (source all) into unstable, unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 1)
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.3.4-1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing