minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Mar 11, 2020 |
| Centos_linux | — | Upgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-docsUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-full-i18n | Jul 8, 2020 | Mar 11, 2020 |
| Debian | — | Upgrade node-minimist | Jul 30, 2024 | Mar 11, 2020 |
| Oracle_linux | — | Upgrade nodejs-develUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs | Jul 22, 2020 | Mar 10, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Nov 10, 2021 | Mar 10, 2020 |
| Redhat_linux | — | Upgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade npmUpgrade nodejs-nodemon | Jul 8, 2020 | Mar 11, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 11, 2020 |
| Suse | — | Upgrade npm6Upgrade nodejs12-docsUpgrade nodejs12Upgrade nodejs8-develUpgrade nodejs8-docsUpgrade nodejs6Upgrade npm12Upgrade nodejs12-develUpgrade nodejs10-develUpgrade nodejs8Upgrade nodejs10-docsUpgrade npm8Upgrade npm10Upgrade nodejs6-docsUpgrade nodejs10Upgrade nodejs6-devel | Jun 10, 2020 | Mar 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub