Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-libsUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs | Dec 19, 2022 | Mar 17, 2022 |
| Centos_linux | — | Upgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-libsUpgrade nodejs-develUpgrade nodejs-libs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-packaging | Dec 16, 2022 | Mar 17, 2022 |
| Debian | — | Upgrade node-minimist | Jul 30, 2024 | Mar 17, 2022 |
| Oracle_linux | — | Upgrade nodejsUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-libs | Dec 16, 2022 | Mar 10, 2022 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 10, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 17, 2022 |
| Redhat_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-libs-debuginfoUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-libsNo solution existsUpgrade nodejs-packaging | Dec 16, 2022 | Mar 17, 2022 |
| Rocky_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejsUpgrade npmUpgrade nodejs-libsUpgrade nodejs-libs-debuginfoUpgrade nodejs-debuginfoUpgrade nodejs-debugsource | Mar 12, 2024 | Mar 17, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.6Upgrade Splunk Enterprise to version 10.0.1Upgrade Splunk Enterprise to version 9.4.4Upgrade Splunk Enterprise to version 9.2.8 | Jul 30, 2026 | Mar 17, 2022 |
| Suse | — | Upgrade nodejs8-docsUpgrade nodejs14-develUpgrade nodejs12Upgrade nodejs8Upgrade nodejs12-docsUpgrade nodejs12-develUpgrade npm14Upgrade nodejs8-develUpgrade nodejs10Upgrade nodejs10-develUpgrade nodejs14Upgrade nodejs10-docsUpgrade npm10Upgrade npm12Upgrade corepack14Upgrade nodejs14-docsUpgrade npm8 | Oct 26, 2022 | Mar 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub