showdownjs / showdown

A bidirectional Markdown to HTML to Markdown converter written in Javascript
http://www.showdownjs.com/
MIT License
14.26k stars 1.56k forks source link

Update yargs to 14.2.0 #738

Closed adamjc closed 4 years ago

adamjc commented 4 years ago

This fixes the mem security vulnerability (https://github.com/jimmyleray/Emendare/issues/584).

The vulnerability only presents itself when showdown is used as a CLI; it is unlikely that this would have been exploitable.