Substack: >> Minimist >> 0.0.9 Security Vulnerabilities
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
CVSS Score
9.8
EPSS Score
0.011
Published
2022-03-17
minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.
CVSS Score
5.6
EPSS Score
0.003
Published
2020-03-11