cloudsploit
cloudsploit copied to clipboard
Update mocha to v.10.2.0
trafficstars
mocha 5.1.0 - 9.2.1
Depends on vulnerable versions of yargs-unparser <=1.6.3
which depends on vulnerable versions of flat <5.0.1
flat vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-2j2x-2gpw-g8fm
Upgrading mocha will also help upgrade minimatch
minimatch <3.0.5 which has ReDoS vulnerability - https://github.com/advisories/GHSA-f8q6-p94x-37v3