minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging | May 4, 2022 | Mar 11, 2020 |
| Centos_linux | — | Upgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-devel | Jul 8, 2020 | Mar 11, 2020 |
| Debian | — | Upgrade node-minimist | Jul 30, 2024 | Mar 11, 2020 |
| Oracle_linux | — | Upgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-develUpgrade npm | Jul 22, 2020 | Mar 10, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Nov 10, 2021 | Mar 10, 2020 |
| Redhat_linux | — | Upgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-devel | Jul 8, 2020 | Mar 11, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 11, 2020 |
| Suse | — | Upgrade nodejs6Upgrade npm8Upgrade nodejs6-docsUpgrade nodejs6-develUpgrade nodejs10Upgrade npm10Upgrade nodejs10-docsUpgrade nodejs12-develUpgrade nodejs8Upgrade npm6Upgrade nodejs12Upgrade nodejs8-docsUpgrade nodejs8-develUpgrade npm12Upgrade nodejs10-develUpgrade nodejs12-docs | Jun 10, 2020 | Mar 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub