mongo-gui icon indicating copy to clipboard operation
mongo-gui copied to clipboard

Minimist <=1.2.5 is vulnerable to CVE-2021-44906 and should be upgraded to 1.2.6

Open alexeiyarilovets opened this issue 2 years ago • 0 comments

Minimist <=1.2.5 is vulnerable to CVE-2021-44906 that is critical

https://nvd.nist.gov/vuln/detail/CVE-2021-44906

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95)

Resolution: upgrarde minimist to 1.2.6

alexeiyarilovets avatar Aug 28 '22 08:08 alexeiyarilovets