npm package
minimist
pkg:npm/minimist
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-44906 | — | >= 1.0.0, < 1.2.6 | 1.2.6 | Mar 17, 2022 | Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95). | ||
| CVE-2020-7598 | — | < 0.2.1 | 0.2.1 | Mar 11, 2020 | minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload. |
- CVE-2021-44906Mar 17, 2022affected >= 1.0.0, < 1.2.6fixed 1.2.6
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
- CVE-2020-7598Mar 11, 2020affected < 0.2.1fixed 0.2.1
minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.