search

dominictarr / rc

The non-configurable configuration loader for lazy people.
Other
1.02k stars 97 forks source link

update minimist version #119

Open Katttori opened 4 years ago

Katttori commented 4 years ago

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload.

goatandsheep commented 3 years ago

fixed in https://www.npmjs.com/package/run-con