Description

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.

Remediation

References

https://snyk.io/vuln/SNYK-JS-MINIMIST-559764

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00024.html

Related Vulnerabilities

CVE-2017-20162 Vulnerability in maven package org.webjars.npm:ms

CVE-2019-14653 Vulnerability in npm package editor.md

CVE-2022-21129 Vulnerability in npm package nemo-appium

CVE-2022-3978 Vulnerability in npm package nodebb

CVE-2023-46122 Vulnerability in maven package org.scala-sbt:io_2.12

Severity

Medium

Classification

CWE-1321 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Tags

Exploit Patch Third Party Advisory Mailing List