Related Vulnerabilities: CVE-2021-44906  

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Description

The MITRE CVE dictionary describes this issue as:

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Additional Information

  • Bugzilla 2066009: CVE-2021-44906 minimist: prototype pollution
  • CWE-400: Uncontrolled Resource Consumption
  • FAQ: Frequently asked questions about CVE-2021-44906