Prototype Pollution in minimist
Minimist prior to 1.2.6 and 0.2.4 is vulnerable to Prototype Pollution via file `index.js`, function `setKey()` (lines 69-95).
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-44906US | critical9.8 | Exploit | ||
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95). | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zipWEB
- https://github.com/minimistjs/minimist/commit/34e20b8461118608703d6485326abbb8e35e1703WEB
- https://github.com/minimistjs/minimist/commit/bc8ecee43875261f4f17eb20b1243d3ed15e70ebWEB
- https://github.com/minimistjs/minimist/commit/c2b981977fa834b223b408cfb860f933c9811e4dWEB
- https://github.com/minimistjs/minimist/commit/ef9153fc52b6cea0744b2239921c5dcae4697f11WEB
- https://github.com/minimistjs/minimist/commits/v0.2.4WEB
- https://github.com/minimistjs/minimist/issues/11WEB
- https://github.com/minimistjs/minimist/pull/24WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan