---
title: "minimist security advisories"
description: "2 known security advisories for minimist, with the versions they affect and the version that fixes each."
url: https://inlinr.com/packages/minimist/security
lang: en
---

[Packages](https://inlinr.com/packages)

# minimist

1.2.8 · 9 Feb 2023 MIT 226.8M / week [Repository](https://github.com/minimistjs/minimist) [npm](https://www.npmjs.com/package/minimist) [Atom feed](https://inlinr.com/packages/feed/minimist)

Your version 

## Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

| Line | Newest | Where it stands                                                               |
| ---- | ------ | ----------------------------------------------------------------------------- |
|      | 1.2.8  | Safe from 1.2.6                                                               |
|      | 0.2.4  | 4 open advisories, worst critical  · last release Feb 2023, no longer updated |

- Critical  
[Prototype Pollution in minimist](https://inlinr.com/advisories/GHSA-xvch-5gv4-984h)GHSA-xvch-5gv4-984h · 18 Mar 2022  
fixed in 1.2.6, 0.2.4
- Moderate  
[Prototype Pollution in minimist](https://inlinr.com/advisories/GHSA-vh95-rmgr-6w4m)GHSA-vh95-rmgr-6w4m · 3 Apr 2020  
fixed in 1.2.3, 0.2.1

### Quality and security signals

What [npm](https://www.npmjs.com/package/minimist) and [deps.dev](https://deps.dev/npm/minimist) say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Reading releases, release notes and advisories…

Registry facts last checked 2 Nov 2026\. Releases and advisories last read 2 Nov 2026.