6.8
CVSSv2

CVE-2020-7598

Published: 11/03/2020 Updated: 22/04/2022
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.6 | Impact Score: 3.4 | Exploitability Score: 2.2
VMScore: 607
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

minimist prior to 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

substack minimist

opensuse leap 15.1

Vendor Advisories

Debian Bug report logs - #953762 node-minimist: CVE-2020-7598 Package: src:node-minimist; Maintainer for src:node-minimist is Debian Javascript Maintainers <pkg-javascript-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 13 Mar 2020 04:42:01 UTC Severity: important Tags ...
Synopsis Important: nodejs:10 security update Type/Severity Security Advisory: Important Topic An update for the nodejs:10 module is now available for Red Hat Enterprise Linux 81 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulner ...
Synopsis Moderate: OpenShift Container Platform 458 security update Type/Severity Security Advisory: Moderate Topic An update for cluster-network-operator-container, cluster-version-operator-container, elasticsearch-operator-container, logging-kibana6-container, and ose-cluster-svcat-controller-manager-op ...
Synopsis Moderate: Red Hat OpenShift Service Mesh security update Type/Severity Security Advisory: Moderate Topic An update for jaeger, kiali, and servicemesh-grafana is now available for OpenShift Service Mesh 10Red Hat Product Security has rated this update as having a security impact of Moderate A Com ...
Synopsis Important: nodejs:10 security update Type/Severity Security Advisory: Important Topic An update for the nodejs:10 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CV ...
Synopsis Important: nodejs:12 security update Type/Severity Security Advisory: Important Topic An update for the nodejs:12 module is now available for Red Hat Enterprise Linux 81 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulner ...
Synopsis Important: nodejs:12 security update Type/Severity Security Advisory: Important Topic An update for the nodejs:12 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CV ...
Synopsis Important: rh-nodejs12-nodejs security update Type/Severity Security Advisory: Important Topic An update for rh-nodejs12-nodejs is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...
Synopsis Moderate: OpenShift Container Platform 311 security update Type/Severity Security Advisory: Moderate Topic An update for atomic-openshift, atomic-openshift-web-console, and cri-o is now available for Red Hat OpenShift Container Platform 311Red Hat Product Security has rated this update as having ...
Synopsis Important: nodejs:10 security update Type/Severity Security Advisory: Important Topic An update for the nodejs:10 module is now available for Red Hat Enterprise Linux 80 Update Services for SAP SolutionsRed Hat Product Security has rated this update as having a security impact of Important A Com ...
Synopsis Important: rh-nodejs10-nodejs security update Type/Severity Security Advisory: Important Topic An update for rh-nodejs10-nodejs is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...
Synopsis Moderate: OpenShift Container Platform 461 image security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat OpenShift Container Platform 46Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability S ...
Synopsis Important: RHV Manager (ovirt-engine) 44 security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic Updated ovirt-engine packages that fix several bugs and add various enhancements are now availableRed Hat Product Security has rated this update as having a security ...

Github Repositories

launchqtcreator README QtCreator is very useful for certain tasks! When working on Qt projects, there are things I find Qt Creator invaluable for -just too convenient to use anything else (almost) I often use Visual Studio Code and QtCreator together when working on c++/gui projects

Learning how to create desktop electron app from Rust Wasm/WebAssembly

mem1_electron Learning how to create desktop electron app from Rust Wasm/WebAssembly version: 10 date: 2019-04-05 author: bestiadev repository: GitHub Hashtags: #rustlang #game #tutorial My projects on Github are more like a tutorial than a finished product: bestia-dev tutorials Based on Dodrio Virtual Dom memory game mem1 Electron is Cross Platform - compatible with M

Learning how to create desktop electron app from Rust Wasm/WebAssembly

mem1_electron Learning how to create desktop electron app from Rust Wasm/WebAssembly version: 10 date: 2019-04-05 author: bestiadev repository: GitHub Hashtags: #rustlang #game #tutorial My projects on Github are more like a tutorial than a finished product: bestia-dev tutorials Based on Dodrio Virtual Dom memory game mem1 Electron is Cross Platform - compatible with M

A VS Code extension that provides a command to browse the current project using GitExtensions, from the Explorer.

Git Extensions for VS Code This extension provides a command to browse the current project using GitExtensions, from the Explorer and the Editor It also support Workspaces Features Explorer From the Explorer, when you right-click (anywhere; a file or not) and then select the Browse with Git Extensions, Git Extensions will open in Browse mode for your current project

Prototype Pollution in minimist

Prototype Pollution in minimist What hadn't been said about prototype pollution vulnerabilities? One thing we can all agree on is that it's a controversial topic and some may view it as a vulnerability while others will completely dismiss it Minimist and CVE-2020-7598 Snyk reported the prototype pollution minimist vulnerability in March 2020, assigning it CVE-2020-75

Generate flow coverage reports in JSON, HTML and in the console.

flow-coverage-report flow-coverage-report is a node command line tool to help projects which are using flow types in their JavaScript code to keep track and visualize the coverage of the flow types checks How to generate flow coverage reports for your project Install the command line tool (globally or as a dev dependency of your project) $ npm install -g flow-coverage-rep

CVE-2021-44906 Originally from: githubcom/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoCzip Run npm run hack And you will see the any function's done property is changed to true The explanation of command line node indexjs --_concatconstructorprototypedone true: -- is the hypen mark normally used

A VS Code extension that adds a right-click menu to rb and erb files which shows 'ri' documentation

railsindex README RailsIndex is a VS Code extension for Ruby and Ruby on Rails files with the extensions "rb" and "erb" It will add a context menu that brings up a terminal which runs 'ri' on the text under the cursor That's all it does Features RailsIndex will add a context menu that brings up a terminal which runs 'ri' on th