{"id":"EUVD-2020-0395","revision":"cb8ff5c4e6d6476183c8f287f7590f12","records":[{"revision":"cb8ff5c4e6d6476183c8f287f7590f12","observedAt":"2026-11-07T20:10:09.144+00:00","statement":{"source":"euvd","id":"EUVD-2020-0395","aliases":["CVE-2020-7598","GHSA-vh95-rmgr-6w4m"],"title":"minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a \"constructor\" or \"__proto__\" payload.","description":"minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a \"constructor\" or \"__proto__\" payload.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[],"references":["https://snyk.io/vuln/SNYK-JS-MINIMIST-559764","http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00024.html"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-0395","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Mar 11, 2020, 9:40:09 PM","dateUpdated":"Oct 8, 2026, 9:03:31 PM"},"relatedAdvisories":[{"id":"RHSA-2020:2848","title":"Red Hat Security Advisory: nodejs:10 security update","vulnerabilityIds":["CVE-2020-7598","CVE-2020-8174","CVE-2020-11080"]},{"id":"SUSE-SU-2020:1575-1","title":"Security update for nodejs10","vulnerabilityIds":["CVE-2020-10531","CVE-2020-11080","CVE-2020-7598","CVE-2020-8174"]},{"id":"RHSA-2021:2643","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.38 extras and security update","vulnerabilityIds":["CVE-2020-7598"]},{"id":"SUSE-SU-2020:1568-1","title":"Security update for nodejs10","vulnerabilityIds":["CVE-2020-10531","CVE-2020-11080","CVE-2020-7598","CVE-2020-8174"]},{"id":"SUSE-SU-2020:2800-1","title":"Security update for nodejs8","vulnerabilityIds":["CVE-2020-11080","CVE-2020-15095","CVE-2020-7598","CVE-2020-8174"]},{"id":"RHSA-2020:3247","title":"Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2017-18635","CVE-2019-8331","CVE-2019-13990","CVE-2019-19336","CVE-2020-7598","CVE-2020-10775","CVE-2020-11022","CVE-2020-11023"]},{"id":"RHSA-2020:3042","title":"Red Hat Security Advisory: nodejs:10 security update","vulnerabilityIds":["CVE-2020-7598","CVE-2020-8174","CVE-2020-11080"]},{"id":"SUSE-SU-2020:1576-1","title":"Security update for nodejs8","vulnerabilityIds":["CVE-2020-11080","CVE-2020-7598","CVE-2020-8174"]},{"id":"openSUSE-SU-2020:0802-1","title":"Security update for nodejs8","vulnerabilityIds":["CVE-2020-11080","CVE-2020-7598","CVE-2020-8174"]},{"id":"SUSE-SU-2020:1606-1","title":"Security update for nodejs12","vulnerabilityIds":["CVE-2020-11080","CVE-2020-7598","CVE-2020-8172","CVE-2020-8174"]},{"id":"RHSA-2020:2992","title":"Red Hat Security Advisory: OpenShift Container Platform 3.11 security update","vulnerabilityIds":["CVE-2019-14891","CVE-2020-7598","CVE-2020-8552","CVE-2020-8558","CVE-2020-8945","CVE-2020-10715"]},{"id":"RHSA-2020:3084","title":"Red Hat Security Advisory: rh-nodejs10-nodejs security update","vulnerabilityIds":["CVE-2020-7598","CVE-2020-8174","CVE-2020-10531","CVE-2020-11080"]},{"id":"RHSA-2020:2362","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh security update","vulnerabilityIds":["CVE-2019-10744","CVE-2020-7598","CVE-2020-11022","CVE-2020-12459"]},{"id":"SUSE-SU-2020:1623-1","title":"Security update for nodejs6","vulnerabilityIds":["CVE-2020-7598","CVE-2020-8174"]},{"id":"RHSA-2020:2895","title":"Red Hat Security Advisory: rh-nodejs12-nodejs security update","vulnerabilityIds":["CVE-2020-7598","CVE-2020-8172","CVE-2020-8174","CVE-2020-10531","CVE-2020-11080"]},{"id":"RHSA-2020:2847","title":"Red Hat Security Advisory: nodejs:12 security update","vulnerabilityIds":["CVE-2020-7598","CVE-2020-8172","CVE-2020-8174","CVE-2020-11080"]},{"id":"RHSA-2020:4298","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.1 image security update","vulnerabilityIds":["CVE-2013-0169","CVE-2018-18624","CVE-2019-11358","CVE-2019-16769","CVE-2020-7013","CVE-2020-7598","CVE-2020-7662","CVE-2020-8203","CVE-2020-8559","CVE-2020-9283","CVE-2020-10715","CVE-2020-10743","CVE-2020-11022","CVE-2020-11023","CVE-2020-11110","CVE-2020-12052","CVE-2020-12245","CVE-2020-13822","CVE-2020-14040","CVE-2020-14336","CVE-2020-15366"]},{"id":"RHSA-2020:2852","title":"Red Hat Security Advisory: nodejs:12 security update","vulnerabilityIds":["CVE-2020-7598","CVE-2020-8172","CVE-2020-8174","CVE-2020-11080"]},{"id":"SUSE-RU-2020:1238-1","title":"Recommended update for SUSE Manager Server 4.0","vulnerabilityIds":["CVE-2020-7598"]},{"id":"RHSA-2020:2849","title":"Red Hat Security Advisory: nodejs:10 security update","vulnerabilityIds":["CVE-2020-7598","CVE-2020-8174","CVE-2020-11080"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2020-0395","identifiers":["EUVD-2020-0395","CVE-2020-7598","GHSA-vh95-rmgr-6w4m"]},"retained":false,"historicalAffected":[]}],"coverage":[]}