Prototype Pollution in [email protected] and License issue in [email protected]

[hetzbr]

There is a prototype pollution vulnerability in the latest version of Bunyan 2.0.2 introduced by [email protected] > [email protected] > [email protected] > [email protected]

https://snyk.io/vuln/SNYK-JS-MINIMIST-559764

In addition, there is a license issue introduced by [email protected] > [email protected]

https://snyk.io/vuln/snyk:lic:npm:exeunt:MPL-2.0

[a-n-d-r-3-w]

(The prototype pollution vulnerability also exists in bunyan v1, captured in https://github.com/trentm/node-bunyan/issues/643)