CVE-2020-7598

About vulnerability

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a “constructor” or “proto” payload.

Affected product:

Acorn , Express , Next.js , Node.js , cross-spawn , handlebars , karma , minimist , protractor , semver

Affected packages:

minimist @ 1.2.0 (+38 more)

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a “constructor” or “proto” payload.