CVE-2021-44906

01/תיאור (מקור, אנגלית)

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

02/מוצרים מושפעים

substack: minimist

03/קישורים10

• github.com/substack/minimist/issues/164 ExploitIssue TrackingPatchThird Party Advisory
• snyk.io/vuln/SNYK-JS-MINIMIST-559764 ExploitNot ApplicablePatchThird Party Advisory
• github.com/substack/minimist/issues/164 ExploitIssue TrackingPatchThird Party Advisory
• snyk.io/vuln/SNYK-JS-MINIMIST-559764 ExploitNot ApplicablePatchThird Party Advisory
• github.com/Marynk/JavaScript-vulnerability-detection/blob/main‮… ExploitThird Party Advisory
• github.com/substack/minimist/blob/master/index.js#L69 ExploitThird Party Advisory
• github.com/Marynk/JavaScript-vulnerability-detection/blob/main‮… ExploitThird Party Advisory
• github.com/substack/minimist/blob/master/index.js#L69 ExploitThird Party Advisory
• security.netapp.com/advisory/ntap-20240621-0006/
• stackoverflow.com/questions/8588563/adding-custom-properties-t‮… Issue TrackingThird Party Advisory