This repository has been archived by the owner on Nov 21, 2022. It is now read-only.
CVE-2021-44906 (High) detected in minimist-1.2.5.tgz #121
Labels
security vulnerability
Security vulnerability detected by WhiteSource
CVE-2021-44906 - High Severity Vulnerability
Vulnerable Library - minimist-1.2.5.tgz
parse argument options
Library home page: https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz
Dependency Hierarchy:
Found in base branch: master
Vulnerability Details
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
Publish Date: 2022-03-17
URL: CVE-2021-44906
CVSS 3 Score Details (9.8)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2022-03-17
Fix Resolution (minimist): 1.2.6
Direct dependency fix Resolution (@angular/localize): 9.1.0
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: