CVE-2021-44906
קריטית 9.8
תיאור (מקור, אנגלית)
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
מדדים
- CVSS 3.1
-
9.8 (CRITICAL)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 5% (אחוזון 100) נכון ל-18/10/2026
- CWE
- CWE-1321
מוצרים מושפעים
substack: minimist
קישורים
- https://github.com/substack/minimist/issues/164 ExploitIssue TrackingPatchThird Party Advisory
- https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 ExploitNot ApplicablePatchThird Party Advisory
- https://github.com/substack/minimist/issues/164 ExploitIssue TrackingPatchThird Party Advisory
- https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 ExploitNot ApplicablePatchThird Party Advisory
- https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimis… ExploitThird Party Advisory
- https://github.com/substack/minimist/blob/master/index.js#L69 ExploitThird Party Advisory
- https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimis… ExploitThird Party Advisory
- https://github.com/substack/minimist/blob/master/index.js#L69 ExploitThird Party Advisory
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://stackoverflow.com/questions/8588563/adding-custom-properties-to-a-func… Issue TrackingThird Party Advisory