CVE-2020-7598

MediumCVSS 5.6

Published: 11/03/2020(UTC)Updated: 08/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.93%

79th percentile - higher than 79% of all known CVEs

Summary

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.

Risk Assessment

Prototype pollution vulnerability could lead to modification of application behavior, potentially enabling attacks such as code execution or security bypass.

Recommendation

Update minimist to version 1.2.2 or later.

Other vulnerabilities in minimist

CVE-2021-44906Critical
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Original NVD description (English source)

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS