minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| minimist(npm) | 0 | 0.2.1 | N/A |
| minimist(npm) | 1.0.0 | 1.2.3 | N/A |
CVSS Metrics
