substack/minimist
GitHub
Releases0
parse argument options
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 1.2.6 | 9.8 CRITICAL | 7.5 HIGH | ||
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95). | ||||
| < 1.2.2 | 5.6 MEDIUM | 6.8 MEDIUM | ||
minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload. | ||||