[VULN] Security Alert for minimist

[srm-local-dev-test]

Alert IDs:

• 56004ca8-dacf-4374-bd7c-f71194911df0
• 87f1f93d-4d8b-4f2a-8a83-20c77111bd3a

Vulnerabilities in minimist

Release: 1.0.125

Total Vulnerabilities: 2

---

1. CVE-2020-7598

Severity: MEDIUM (Score: 5.6)

Description:
minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-7598

Alert ID: 56004ca8-dacf-4374-bd7c-f71194911df0

---

2. CVE-2021-44906

Severity: CRITICAL (Score: 9.8)

Description:
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-44906

Alert ID: 87f1f93d-4d8b-4f2a-8a83-20c77111bd3a

---