CLSA-2026-1777250305 TuxCare security update for minimist (4 CVEs)

TuxCare rebuilt minimist to address 4 CVEs. Fixed in 1.2.1-tuxcare.1...

CLSA-2026-1774916708 TuxCare security update for minimist (5 CVEs)

TuxCare rebuilt minimist to address 5 CVEs. Fixed in 1.2.0-tuxcare.1...

CLSA-2026-1773101698 TuxCare security update for minimist (2 CVEs)

TuxCare rebuilt minimist to address 2 CVEs. Fixed in 1.2.8-tuxcare.1...

The vulnerability of the setKey() function in the minimist library, which allows a hacker to execute a “ prototype pollution ” attack.

The vulnerability of the setKey function in the minimist library relates to the uncontrolled modification of object prototype attributes. Exploiting this vulnerability could allow a remote attacker to execute a “prototype pollution” attack...

minimist: prototype pollution

An Uncontrolled Resource Consumption flaw was found in minimist. The original fix for CVE-2020-7598 was incomplete as it was still possible to bypass in some cases. This flaw CVE-2021-44906 allows an attacker to trick the library into adding or modifying the properties of Object.prototype, using ...

minimist: prototype pollution

An Uncontrolled Resource Consumption flaw was found in minimist. The original fix for CVE-2020-7598 was incomplete as it was still possible to bypass in some cases. This flaw CVE-2021-44906 allows an attacker to trick the library into adding or modifying the properties of Object.prototype, using ...

Prototype Pollution

minimist is vulnerable to prototype pollution. The library allows an attacker to modify properties of Object.prototype using a constructor or proto payload...

UBUNTU-CVE-2020-7598

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...