kleros-v2 icon indicating copy to clipboard operation
kleros-v2 copied to clipboard

Security: yargs-parser should be >5.0.1

Open jaybuidl opened this issue 3 years ago • 0 comments

Advisory: GHSA-p9pc-299p-vxgp

$ yarn why -R yargs-parser
├─ @kleros/kleros-v2-contracts@workspace:contracts
│  ├─ ethereum-waffle@npm:3.4.0 (via npm:^3.4.0)
│  │  ├─ @ethereum-waffle/chai@npm:3.4.3 (via npm:^3.4.0)
│  │  │  └─ @ethereum-waffle/provider@npm:3.4.1 (via npm:^3.4.1)
│  │  │     └─ @ethereum-waffle/ens@npm:3.3.1 (via npm:^3.3.1)
│  │  │        └─ @ensdomains/ens@npm:0.4.5 (via npm:^0.4.4)
│  │  │           └─ solc@npm:0.4.26 (via npm:^0.4.20)
│  │  │              └─ yargs@npm:4.8.1 (via npm:^4.7.1)
│  │  │                 └─ yargs-parser@npm:2.4.1 (via npm:^2.4.1)

jaybuidl avatar Mar 21 '22 14:03 jaybuidl