CVE-2020-7598: Opensuse Leap

Medium severity, CVSS 5.6. EPSS: 1.9% chance of exploitation in the next 30 days.

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.

Affected products

• Opensuse Leap: version 15.1 only
• Substack Minimist: before 1.2.2 (fixed in 1.2.2)

Published 2020-03-11. Last modified 2026-10-08.