search

darkobits / vite-plugin-favicons

💅 Generate favicons for your Vite project.
Other
8 stars 1 forks source link

Minimist <=1.2.5 is vulnerable to Prototype Pollution #11

Closed Cordazar closed 1 year ago

Cordazar commented 1 year ago

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

https://github.com/advisories/GHSA-xvch-5gv4-984h

darkobits commented 1 year ago

Updated dependencies; as of v0.2.0 this package no longer has versions of minimist <= 1.2.5 in its dependency graph.