OESA-2022-1665

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2022-1665

Upstream

Published

2022-05-20T11:03:48Z

Modified

2025-08-12T05:10:45.519271Z

Summary

nodejs-minimist security update

Details

This module is the guts of optimist's argument parser without all the fanciful decoration.

Security Fix(es):

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).(CVE-2021-44906)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.6-1.oe1

{
    "src": [
        "nodejs-minimist-1.2.6-1.oe1.src.rpm"
    ],
    "noarch": [
        "nodejs-minimist-1.2.6-1.oe1.noarch.rpm"
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.6-1.oe1

{
    "src": [
        "nodejs-minimist-1.2.6-1.oe1.src.rpm"
    ],
    "noarch": [
        "nodejs-minimist-1.2.6-1.oe1.noarch.rpm"
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.6-1.oe2203

{
    "src": [
        "nodejs-minimist-1.2.6-1.oe2203.src.rpm"
    ],
    "noarch": [
        "nodejs-minimist-1.2.6-1.oe2203.noarch.rpm"
    ]
}