minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a “constructor” or “proto” payload.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | node-minimist | < 1.2.5-1 | node-minimist_1.2.5-1_all.deb |
Debian | 11 | all | node-minimist | < 1.2.5-1 | node-minimist_1.2.5-1_all.deb |
Debian | 10 | all | node-minimist | < 1.2.0-1+deb10u1 | node-minimist_1.2.0-1+deb10u1_all.deb |
Debian | 999 | all | node-minimist | < 1.2.5-1 | node-minimist_1.2.5-1_all.deb |
Debian | 13 | all | node-minimist | < 1.2.5-1 | node-minimist_1.2.5-1_all.deb |