ROOT-APP-NPM-CVE-2021-44906 CVE-2021-44906 in minimist - Patched by Root

Root has patched CVE-2021-44906 in the minimist package for Root:npm. Multiple fixed versions available...

CVE-2020-7598

es-define-property Object.defineProperty, but not IE 8's broken one. Example const assert = require'assert'; const $defineProperty = require'es-define-property'; if $defineProperty assert.equal$defineProperty, Object.defineProperty; else if Object.defineProperty assert.equal$defineProperty, false...

CVE-2021-44906

CVE-2021-44906 原出处：https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip 运行 npm run hack 然后你会看到任意函数的 done 属性被改为 true。 命令行 node index.js --.concat.constructor.prototype.done true 的解释： -- 是命令行参数中常用的连字符标记。 是 minimist...

Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2020_2848)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20202848 advisory. nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 nodejs-minimist: prototype pollution allows adding or modifying properties of...

Astra Linux – Vulnerability in node-minimist

Minimist =1.2.5 is vulnerable to Prototype Pollution through the file index.js, the function setKey lines 69-95...

Injection minimist Dependency in Confluence Data Center

This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Injection vulnerability was introduced in versions 9.0.1 and 9.2.22 of Confluence Data Center. This Injection...

CLSA-2026-1785468078 TuxCare security update for minimist (2 CVEs)

TuxCare rebuilt minimist to address 2 CVEs. Fixed in 0.0.9-tuxcare.1...

CLSA-2026-1777250305 TuxCare security update for minimist (1 CVE)

TuxCare rebuilt minimist to address 1 CVE. Fixed in 1.2.1-tuxcare.1...

CLSA-2026-1774916708 TuxCare security update for minimist (2 CVEs)

TuxCare rebuilt minimist to address 2 CVEs. Fixed in 1.2.0-tuxcare.1...

CLSA-2026-1774916707 TuxCare security update for minimist (2 CVEs)

TuxCare rebuilt minimist to address 2 CVEs. Fixed in 0.0.8-tuxcare.1...

CLSA-2026-1773101698 TuxCare security update for minimist (2 CVEs)

TuxCare rebuilt minimist to address 2 CVEs. Fixed in 1.2.8-tuxcare.1...

CLSA-2026-1772583204 TuxCare security update for minimist (2 CVEs)

TuxCare rebuilt minimist to address 2 CVEs. Fixed in 0.0.10-tuxcare.1...

ROOT-APP-NPM-CVE-2020-7598 CVE-2020-7598 in minimist - Patched by Root

Root has patched CVE-2020-7598 in the minimist package for Root:npm. Multiple fixed versions available...

Exploit for Prototype Pollution in Substack Minimist

CVE-2020-7598 - Prototype Pollution in minimist Disclaimer...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: nodejs-minimist (UTSA-2026-016649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016649 advisory. minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a constructor or proto payload. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: nodejs-minimist (UTSA-2026-016760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016760 advisory. Minimist =1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey lines 69-95. Tenable has extracted the preceding description block directly...

RHCOS 3 : OpenShift Container Platform 3.11 (RHSA-2020:2992)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2992 advisory. - cri-o: infra container reparented to systemd following OOM Killer killing it's conmon CVE-2019-14891 - nodejs-minimist: prototype...

MiracleLinux 9 : nodejs-nodemon-2.0.20-2.el9, nodejs-16.18.1-3.el9 (AXSA:2023-5057:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5057:01 advisory. minimist: prototype pollution CVE-2021-44906 nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-3517 nodejs: HTTP Request Smuggling due t...

MiracleLinux 7 : rh-nodejs12-nodejs-12.18.2-1.el7 (AXSA:2020-219:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-219:03 advisory. ICU: Integer overflow in UnicodeString::doAppend CVE-2020-10531 nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 nodejs-minimist:...

MiracleLinux 7 : rh-nodejs14-nodejs-14.20.1-2.el7 (AXSA:2022-3900:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3900:01 advisory. nodejs: Improper handling of URI Subject Alternative Names CVE-2021-44531 nodejs: Certificate Verification Bypass via String Injection CVE-2021-4453...