minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging | May 4, 2022 | Mar 11, 2020 |
| Centos_linux | — | Upgrade nodejsUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade npm | Jul 8, 2020 | Mar 11, 2020 |
| Debian | — | Upgrade node-minimist | Jul 30, 2024 | Mar 11, 2020 |
| Oracle_linux | — | Upgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-develUpgrade npmUpgrade nodejs-nodemon | Jul 22, 2020 | Mar 10, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Nov 10, 2021 | Mar 10, 2020 |
| Redhat_linux | — | Upgrade npmUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-debuginfoUpgrade nodejs-debugsource | Jul 8, 2020 | Mar 11, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 11, 2020 |
| Suse | — | Upgrade npm10Upgrade nodejs6-develUpgrade nodejs6Upgrade nodejs6-docsUpgrade npm8Upgrade nodejs10Upgrade nodejs8-docsUpgrade nodejs8Upgrade npm12Upgrade nodejs12-develUpgrade nodejs8-develUpgrade npm6Upgrade nodejs12-docsUpgrade nodejs10-docsUpgrade nodejs12Upgrade nodejs10-devel | Jun 10, 2020 | Mar 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub