Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-libsUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-docs | Dec 19, 2022 | Mar 17, 2022 |
| Centos_linux | — | Upgrade nodejs-docsUpgrade nodejs-libs-debuginfoUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade npmUpgrade nodejs-debuginfo | Dec 16, 2022 | Mar 17, 2022 |
| Debian | — | Upgrade node-minimist | Jul 30, 2024 | Mar 17, 2022 |
| Oracle_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-libsUpgrade npmUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs | Dec 16, 2022 | Mar 10, 2022 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 10, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 17, 2022 |
| Redhat_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-libs-debuginfoUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-packagingNo solution existsUpgrade nodejs-nodemon | Dec 16, 2022 | Mar 17, 2022 |
| Rocky_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-libs-debuginfoUpgrade nodejs-debuginfoUpgrade nodejsUpgrade npmUpgrade nodejs-develUpgrade nodejs-libs | Mar 12, 2024 | Mar 17, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.1Upgrade Splunk Enterprise to version 9.3.6Upgrade Splunk Enterprise to version 9.4.4Upgrade Splunk Enterprise to version 9.2.8 | Jul 30, 2026 | Mar 17, 2022 |
| Suse | — | Upgrade npm12Upgrade corepack14Upgrade nodejs14-docsUpgrade npm10Upgrade nodejs10-docsUpgrade nodejs14Upgrade nodejs10-develUpgrade npm8Upgrade nodejs14-develUpgrade nodejs8Upgrade nodejs12Upgrade nodejs12-develUpgrade nodejs12-docsUpgrade nodejs8-docsUpgrade npm14Upgrade nodejs10Upgrade nodejs8-devel | Oct 26, 2022 | Mar 17, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub