Closed MGudgin closed 4 years ago
Per CVE-202-7598 minimist has a Prototype Pollution vulnerability. This PR updates minimist to a version that does not have that vulnerability.
Run npm audit fix. This updated 'top-level' references to mkdirp and minimist to 0.5.4 and 1.2.5 respectively.
Update webpack to 1.42.1, this addresses some of the remaining minimist vulnerabilities in webpack.
Update remaining dependencies manually to mkdirp 0.5.4 and minimist 1.2.5 by editing package-lock.json.
npm audit now runs clean.
Per CVE-202-7598 minimist has a Prototype Pollution vulnerability. This PR updates minimist to a version that does not have that vulnerability.
Run npm audit fix. This updated 'top-level' references to mkdirp and minimist to 0.5.4 and 1.2.5 respectively.
Update webpack to 1.42.1, this addresses some of the remaining minimist vulnerabilities in webpack.
Update remaining dependencies manually to mkdirp 0.5.4 and minimist 1.2.5 by editing package-lock.json.
npm audit now runs clean.