From bd121c6d683fba078bdf295224ba945ec4878024 Mon Sep 17 00:00:00 2001 From: shenoyguru Date: Thu, 20 May 2021 10:33:12 +1000 Subject: [PATCH] updating the version of yargs the current version of yargs used a version of y18n that has Prototype Pollution issues https://www.npmjs.com/advisories/1654 As mentioned in the abive doco this has been resolved in 5.0.5 or later versions of y18n. yargs version 17.0.1 uses the v5.0.5 of y18n which should resolve this issue --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 2ada41e..fe89661 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "glob": "^7.0.0", "lodash": "^4.17.11", "scss-tokenizer": "^0.3.0", - "yargs": "^13.3.2" + "yargs": "^17.0.1" }, "devDependencies": { "assert": "^1.3.0",