Update minimist for CVE-2021-44906

shelljs / shx

Portable Shell Commands for Node

MIT License

1.72k stars 44 forks source link

Update minimist for CVE-2021-44906 #218

Closed tomhaines432 closed 10 months ago

tomhaines432 commented 1 year ago

Addresses https://github.com/advisories/GHSA-xvch-5gv4-984h

codecov[bot] commented 12 months ago

Codecov Report

All modified lines are covered by tests :white_check_mark:

:loudspeaker: Thoughts on this report? Let us know!.

nfischer commented 10 months ago

Thanks for the contribution.

FYI I'm not planning to expedite a release for this issue because we previously used a semver range which is compatible with the patched version of minimist. Users installing shx on their machines should already receive the latest version of minimist which includes the patch.

This will of course be part of the next shx release whenever that does eventually happen.