Closed debricked[bot] closed 1 year ago
Vulnerable dependency: minimist (npm) 1.2.5
:pushpin: Remember! Check the changes to ensure they don't introduce any breaking changes. :books: Read more about the CVE
@nestjs/cli was downgraded to keep this focused on mqtt. It will be bumped in #200
CVE–2021–44906![shield](https://debricked.com/media/images/default_images/markdown/pull_request/critical3-2-01.svg)
Vulnerable dependency: minimist (npm)
1.2.5
Vulnerability details
Description
### NVD > Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95). ### GitHub > Prototype Pollution in minimist > > Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).CVSS details -
9.8
|CVSS3 metrics|| |:-|:-| |Attack Vector|**Network**| |Attack Complexity|**Low**| |Privileges Required|**None**| |User interaction|**None**| |Scope|**Unchanged**| |Confidentiality|**High**| |Integrity|**High**| |Availability|**High**|References
[Prototype Pollution in minimist · CVE-2021-44906 · GitHub Advisory Database · GitHub](https://github.com/advisories/GHSA-xvch-5gv4-984h)[Related information
:pushpin: Remember! Check the changes to ensure they don't introduce any breaking changes.
:books: Read more about the CVE