GHSA-xvch-5gv4-984h critical
Prototype Pollution in minimist
Affected range
SEMVER: introduced 1.0.0; fixed 1.2.6SEMVER: introduced 0; fixed 0.2.4Fixed versions: 1.2.6, 0.2.4
Evidence path
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
Latest version
1.2.8
No matching published advisory returned
Known exploitation
No KEV match
Checked by exact CVE identifier
Highest advisory severity
Critical
2 active advisories
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Affected range
SEMVER: introduced 1.0.0; fixed 1.2.6SEMVER: introduced 0; fixed 0.2.4Fixed versions: 1.2.6, 0.2.4
Affected range
SEMVER: introduced 0; fixed 0.2.1SEMVER: introduced 1.0.0; fixed 1.2.3Fixed versions: 0.2.1, 1.2.3