Substack vulnerabilities
2 vulnerabilities
Known vulnerabilities in Substack products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Minimist2 vulnerabilities
PrioritiseCVE-2021-44906substack · minimist +5 moresubstack minimistMinimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).CVSS9.8CriticalEPSS4.58%RoutineCVE-2020-7598opensuse · leap +39 moreopensuse leapminimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.CVSS6.8MediumEPSS1.93%