CVE-2021-44906

CriticalCVSS 9.8

Published: 17/03/2022(UTC)Updated: 08/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.58%

91th percentile - higher than 91% of all known CVEs

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

An attacker can manipulate object prototypes, potentially leading to application behavior changes, property injection, or further attacks.

Upgrade minimist to version 1.2.6 or later if possible, or apply a workaround by validating input data.

Original NVD description (English source)

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS