Baike.dev
All toolsAI codingTrendingOpen sourceNewsSubmit
Log in
Back to tool/Back to issues
#2616·bower

Update "minimist" dependency in bower-config

Author: chergottCreated Mar 28, 2022Updated Mar 29, 2022

bower-config package currently uses minimist ^0.2.1 which has a Prototype Pollution vulnerability

minimist 1.2.6 addresses this vulnerability

Additional information: NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7598 Vulnerability: https://snyk.io/vuln/npm%3Aminimist

Source: bower/bower

View original on GitHubView discussion on GitHub