CVE-2021-44906

CVE-2021-44906 원본 출처: https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip 실행 root@kitploit: npm run hack 그러면 어떤 함수의 done 속성이 true로 변경된 것을 볼 수 있습니다. 명령줄 node index.js --.concat.constructor.prototype.done true에 대한 설명: --는 일반적으로 명령줄 인수에 사용되는 하이픈 기호입니다. 는 minimis...

CVE-2020-7598

CVE-2020-7598 - minimist의 프로토타입 오염 면책 조항 이 프로젝트는 다음 용도로만 만들어졌습니다: 학습, 보안 연구, 개인 로컬 실습. 허가 없이 시스템에 사용하지 마십시오. CVE 정보 CVE-2020-7598은 npm 패키지의 프로토타입 오염Prototype Pollution 취약점입니다: minimist 취약한 버전: = 1.0.0 1.2.3 이 취약점은 공격자가 다음을 수정할 수 있게 합니다: root@kitploit: Object.prototype 다음과 같은 페이로드를 통해:...

ROOT-APP-NPM-CVE-2021-44906 CVE-2021-44906 in minimist - Patched by Root

Root has patched CVE-2021-44906 in the minimist package for Root:npm. Multiple fixed versions available...

Astra Linux – Vulnerability in node-minimist

Minimist =1.2.5 is vulnerable to Prototype Pollution through the file index.js, the function setKey lines 69-95...

Injection minimist Dependency in Confluence Data Center

This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Injection vulnerability was introduced in versions 9.0.1 and 9.2.22 of Confluence Data Center. This Injection...

CLSA-2026-1785468078 TuxCare security update for minimist (2 CVEs)

TuxCare rebuilt minimist to address 2 CVEs. Fixed in 0.0.9-tuxcare.1...

CLSA-2026-1777250305 TuxCare security update for minimist (4 CVEs)

TuxCare rebuilt minimist to address 4 CVEs. Fixed in 1.2.1-tuxcare.1...

CLSA-2026-1774916707 TuxCare security update for minimist (3 CVEs)

TuxCare rebuilt minimist to address 3 CVEs. Fixed in 0.0.8-tuxcare.1...

CLSA-2026-1774916708 TuxCare security update for minimist (5 CVEs)

TuxCare rebuilt minimist to address 5 CVEs. Fixed in 1.2.0-tuxcare.1...

CLSA-2026-1773101698 TuxCare security update for minimist (2 CVEs)

TuxCare rebuilt minimist to address 2 CVEs. Fixed in 1.2.8-tuxcare.1...

CLSA-2026-1772583204 TuxCare security update for minimist (2 CVEs)

TuxCare rebuilt minimist to address 2 CVEs. Fixed in 0.0.10-tuxcare.1...

ROOT-APP-NPM-CVE-2020-7598 CVE-2020-7598 in minimist - Patched by Root

Root has patched CVE-2020-7598 in the minimist package for Root:npm. Multiple fixed versions available...

Exploit for Prototype Pollution in Substack Minimist

CVE-2020-7598 - Prototype Pollution in minimist Disclaimer...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: nodejs-minimist (UTSA-2026-016760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016760 advisory. Minimist =1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey lines 69-95. Tenable has extracted the preceding description block directly...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: nodejs-minimist (UTSA-2026-016649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016649 advisory. minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a constructor or proto payload. Tenable has extracted the...

RHCOS 3 : OpenShift Container Platform 3.11 (RHSA-2020:2992)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2992 advisory. - cri-o: infra container reparented to systemd following OOM Killer killing it's conmon CVE-2019-14891 - nodejs-minimist: prototype...

MiracleLinux 7 : rh-nodejs12-nodejs-12.18.2-1.el7 (AXSA:2020-219:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-219:03 advisory. ICU: Integer overflow in UnicodeString::doAppend CVE-2020-10531 nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 nodejs-minimist:...

MiracleLinux 9 : nodejs-nodemon-2.0.20-2.el9, nodejs-16.18.1-3.el9 (AXSA:2023-5057:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5057:01 advisory. minimist: prototype pollution CVE-2021-44906 nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-3517 nodejs: HTTP Request Smuggling due t...

MiracleLinux 7 : rh-nodejs10-nodejs-10.21.0-3.el7 (AXSA:2020-228:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-228:02 advisory. ICU: Integer overflow in UnicodeString::doAppend CVE-2020-10531 nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 nodejs-minimist:...

MiracleLinux 7 : rh-nodejs14-nodejs-14.20.1-2.el7 (AXSA:2022-3900:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3900:01 advisory. nodejs: Improper handling of URI Subject Alternative Names CVE-2021-44531 nodejs: Certificate Verification Bypass via String Injection CVE-2021-4453...