Substack Minimist vulnerabilities
2 vulnerabilities
Known vulnerabilities in Substack Minimist, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2021-44906substack · minimist +5 moresubstack minimistMinimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).CVSS9.8CriticalEPSS4.58%RoutineCVE-2020-7598opensuse · leap +39 moreopensuse leapminimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.CVSS6.8MediumEPSS1.93%