From 92a4fc75c996bb6f297fe46738e5a1f7146c4bb6 Mon Sep 17 00:00:00 2001 From: dreid Date: Mon, 14 Sep 2020 09:43:17 -0700 Subject: [PATCH] Upgrade yargs to deal with a minor security issue. yargs-parser 4.2.1 which is brought in by yargs 6.x has a medium severity prototype polution vulnerability. https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381 Bumping yargs in an attempt to address this. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 74fae87..0706f7b 100644 --- a/package.json +++ b/package.json @@ -11,7 +11,7 @@ "async": "^2.0.1", "aws-sdk": "^2.6.6", "left-pad": "^1.1.3", - "yargs": "^6.2.0" + "yargs": "^16.0.3" }, "devDependencies": { "eslint": "^3.7.0",