Prototype pollution vulnerability in minimist npm package

Snyk researchers disclosed prototype pollution vulnerabilities in popular JavaScript argument-parsing libraries (notably minimist and yargs-parser), demonstrated how polluted Object prototypes can be abused (for example to influence child_process.execSync and achieve privilege escalation), discussed how non-CLI uses (web terminals, chatbots, HTTP handlers) create network-exploitable scenarios, provided CVSS-based severity assessment (medium, CVSS 5.6), and coordinated fixes and backports with maintainers.