{"id":"CVE-2020-7598","revision":"23077f90f15044e6bab5bb05a457b1b4","records":[{"revision":"23077f90f15044e6bab5bb05a457b1b4","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2020-7598","aliases":[],"title":"minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a \"constructor\" or \"__proto__\" payload.","description":"minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a \"constructor\" or \"__proto__\" payload.","state":0,"publishedAt":"2020-03-11T21:40:09+00:00","modifiedAt":"2026-10-08T21:03:31.655+00:00","affected":[{"ecosystem":"Vendor product","name":"minimist","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"minimist\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"All versions prior to version 1.2.2\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://snyk.io/vuln/SNYK-JS-MINIMIST-559764","http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00024.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2020-7598","license":"CVE Program Terms of Use","key":"cve-program:CVE-2020-7598","identifiers":["CVE-2020-7598"]},"retained":false,"historicalAffected":[]}],"coverage":[]}