{"action":"Upgrade minimist to 0.2.1 or later.","affected":[{"fixed":"0.2.1","introduced":"0"},{"fixed":"1.2.3","introduced":"1.0.0"}],"component":"minimist","cve_ids":["CVE-2020-7598"],"ecosystem":"npm","epss":0.01931,"exploited":false,"fixed_versions":["0.2.1","1.2.3"],"ghsa_id":"GHSA-vh95-rmgr-6w4m","id":"tcs_01M5KGBZJ7RNRP6VCMRGYQQTJ2","modified_at":"2026-03-13T22:11:31.390433Z","published_at":"2020-04-03T21:48:32Z","references":["https://osv.dev/vulnerability/GHSA-vh95-rmgr-6w4m","https://nvd.nist.gov/vuln/detail/CVE-2020-7598","https://github.com/minimistjs/minimist/commit/10bd4cdf49d9686d48214be9d579a9cdfda37c68","https://github.com/minimistjs/minimist/commit/38a4d1caead72ef99e824bb420a2528eec03d9ab","https://github.com/minimistjs/minimist/commit/4cf1354839cb972e38496d35e12f806eea92c11f#diff-a1e0ee62c91705696ddb71aa30ad4f95","https://github.com/minimistjs/minimist/commit/63e7ed05aa4b1889ec2f3b196426db4500cbda94","https://github.com/substack/minimist","https://snyk.io/vuln/SNYK-JS-MINIMIST-559764","https://www.npmjs.com/advisories/1179","http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00024.html"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-vh95-rmgr-6w4m","url":"https://osv.dev/vulnerability/GHSA-vh95-rmgr-6w4m"}],"summary":"Prototype Pollution in minimist"}