The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-develUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-packaging | Dec 19, 2022 | Mar 17, 2022 |
| Centos_linux | — | Upgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-libs-debuginfo | Dec 16, 2022 | Mar 17, 2022 |
| Debian | — | Upgrade node-minimist | Jul 30, 2024 | Mar 17, 2022 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-devel | Dec 16, 2022 | Mar 10, 2022 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 10, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 17, 2022 |
| Redhat_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade npmNo solution existsUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejs-libs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-docs | Dec 16, 2022 | Mar 17, 2022 |
| Rocky_linux | — | Upgrade nodejs-libs-debuginfoUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-libsUpgrade nodejsUpgrade npmUpgrade nodejs-devel | Mar 12, 2024 | Mar 17, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.4Upgrade Splunk Enterprise to version 9.2.8Upgrade Splunk Enterprise to version 10.0.1Upgrade Splunk Enterprise to version 9.3.6 | Jul 30, 2026 | Mar 17, 2022 |
| Suse | — | Upgrade npm10Upgrade nodejs14-docsUpgrade nodejs10-docsUpgrade npm12Upgrade nodejs14Upgrade npm8Upgrade nodejs10-develUpgrade corepack14Upgrade npm14Upgrade nodejs8Upgrade nodejs12Upgrade nodejs14-develUpgrade nodejs12-docsUpgrade nodejs8-develUpgrade nodejs10Upgrade nodejs12-develUpgrade nodejs8-docs | Oct 26, 2022 | Mar 17, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub