Skip to content

Prototype Pollution [High Severity][https://snyk.io/vuln/SNYK-JS-Y18N-1021887] in y18n@4.0.0 #716

Closed

Description

@ebaynaud

I'm submitting a...

  • Bug report

Current behavior

High vulnerability

Expected behavior

No vulnerability

Solution

Should upgrade yargs dependency to 16

Activity

  1. wzrdtales commented on Nov 17, 2020

    @wzrdtales
    Member

    In db-migrates case this is very low urgency, since the attack vector is not really present. Please feel free to validate that these upgrades do not cause any issues and open a PR to get this upgraded more quickly.

  2. ebaynaud commented on Dec 21, 2020

    @ebaynaud
    Author
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions