elm-analyse icon indicating copy to clipboard operation
elm-analyse copied to clipboard

Published 20 hours ago • verified publisher icon stil4m

Upgrade minimist to address security vuln

Open tillydray opened this issue 2 years ago • 0 comments

https://github.com/substack/minimist#security.

Previous versions had a prototype pollution bug that could cause privilege escalation in some circumstances when handling untrusted user input.

Please use version 1.2.6 or later:

https://security.snyk.io/vuln/SNYK-JS-MINIMIST-2429795 (version <=1.2.5) https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 (version <=1.2.3)

tillydray avatar May 04 '22 19:05 tillydray