CVE-2020-7598

🔶 medium

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.

CVSS Score

5.6

Medium

EPSS Score

1.9

Exploit Probability

Published Date

2020-03-11

First Seen: 2026-01-05

This CVE is Lower Risk - more severe than 31.4% of all 365,863 vulnerabilities in our database.

#250,883

Below average severity

Severity Percentile

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

YES

Can be exploited automatically

💥 Technical Impact

Partial

Limited system impact

SSVC data provided by CISA

Last Modified 2026-10-08

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE IDs (Weakness Types)

CWE-1321

📦 Affected Products 2

Vendor	Product	Status	Affected Versions
opensuse	leap	Affected	v15.1
substack	minimist	Affected	< 1.2.2

Mailing List Third Party Advisory

Exploit Patch Third Party Advisory

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-31431	⚠️ high	7.8	99.9	In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-pla...	2026-04-22
CVE-2025-32463	⛔ critical	9.3	20.8	Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director...	2025-06-30
CVE-2023-32182	🔶 medium	5.9	0.0	A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 ...	2023-09-19
CVE-2022-45153	⚠️ high	7.0	0.1	An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Appli...	2023-02-15
CVE-2022-31252	🔶 medium	4.4	0.1	A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE ...	2022-10-06
CVE-2021-44906	⛔ critical	9.8	4.6	Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).	2022-03-17

These CVEs affect the same products