Lucene search
+L
SubstackMinimist

2 matches found

CVE
CVE
added 2022/03/17 1:5 p.m.573 views

CVE-2021-44906

CVE-2021-44906 affects the minimist library, with versions listed as ≤ 1.2.5. The vulnerability is described as a Prototype Pollution issue via the file index.js, function setKey() (lines 69-95). The connected documents confirm this issue across multiple sources (e.g., Astra Linux advisory, CIRCL...

9.8CVSS9.3AI score0.04581EPSS
Save
CVE
CVE
added 2020/03/11 9:40 p.m.500 views

CVE-2020-7598

CVE-2020-7598 : Root cause is a prototype pollution flaw in the minimist module before version 1.2.2, allowing an attacker to add or modify properties on Object.prototype via a constructor or proto payload. Connected advisories (MiracleLinux/AXSA entries) explicitly reference nodejs-minimist as a...

6.8CVSS6.4AI score0.01931EPSS
SaveWeb