npm/minimist CVE-2020-7598: medium 5.6, EPSS 1.93%
Prototype Pollution in minimist
Action: Upgrade minimist to 0.2.1 or later.
npm i minimist@0.2.1npm i minimist@1.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.1 | - |
| 1.0.0 | 1.2.3 | - |
Fixed versions
| 0.2.1 | 1.2.3 |
Sources
- osv: GHSA-vh95-rmgr-6w4m
- https://nvd.nist.gov/vuln/detail/CVE-2020-7598
- https://github.com/minimistjs/minimist/commit/10bd4cdf49d9686d48214be9d579a9cdfda37c68
- https://github.com/minimistjs/minimist/commit/38a4d1caead72ef99e824bb420a2528eec03d9ab
- https://github.com/minimistjs/minimist/commit/4cf1354839cb972e38496d35e12f806eea92c11f#diff-a1e0ee62c91705696ddb71aa30ad4f95
- https://github.com/minimistjs/minimist/commit/63e7ed05aa4b1889ec2f3b196426db4500cbda94
- https://github.com/substack/minimist
- https://snyk.io/vuln/SNYK-JS-MINIMIST-559764
- https://www.npmjs.com/advisories/1179
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00024.html
CVE-2020-7598 · published · modified · JSON