minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Mar 11, 2020 |
| Centos_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade npm | Jul 8, 2020 | Mar 11, 2020 |
| Debian | — | Upgrade node-minimist | Jul 30, 2024 | Mar 11, 2020 |
| Oracle_linux | — | Upgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-docsUpgrade npm | Jul 22, 2020 | Mar 10, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Nov 10, 2021 | Mar 10, 2020 |
| Redhat_linux | — | Upgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-devel | Jul 8, 2020 | Mar 11, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 11, 2020 |
| Suse | — | Upgrade nodejs10Upgrade nodejs6-docsUpgrade nodejs6Upgrade npm10Upgrade npm8Upgrade nodejs6-develUpgrade npm12Upgrade nodejs8-develUpgrade nodejs12-docsUpgrade nodejs12Upgrade nodejs12-develUpgrade nodejs8-docsUpgrade npm6Upgrade nodejs10-develUpgrade nodejs8Upgrade nodejs10-docs | Jun 10, 2020 | Mar 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub