minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Mar 11, 2020 |
| Centos_linux | — | Upgrade nodejs-develUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade npmUpgrade nodejs-debugsource | Jul 8, 2020 | Mar 11, 2020 |
| Debian | — | Upgrade node-minimist | Jul 30, 2024 | Mar 11, 2020 |
| Oracle_linux | — | Upgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-develUpgrade nodejs-docs | Jul 22, 2020 | Mar 10, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Nov 10, 2021 | Mar 10, 2020 |
| Redhat_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-develUpgrade npmUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-docsUpgrade nodejs-full-i18n | Jul 8, 2020 | Mar 11, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 11, 2020 |
| Suse | — | Upgrade nodejs6-develUpgrade npm8Upgrade nodejs6Upgrade npm10Upgrade nodejs6-docsUpgrade nodejs10Upgrade nodejs10-develUpgrade nodejs8-develUpgrade nodejs12Upgrade nodejs8-docsUpgrade nodejs12-develUpgrade nodejs8Upgrade nodejs10-docsUpgrade npm6Upgrade npm12Upgrade nodejs12-docs | Jun 10, 2020 | Mar 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub