Bump minimist from 1.2.5 to 1.2.6 #494
Labels
bug
Something isn't working
dependencies
Pull requests that update a dependency file
wontfix
This will not be worked on
│ Critical │ Prototype Pollution in minimist │
│ Package │ minimist │
│ Patched in │ >=1.2.6 │
│ Dependency of │ hap-nodejs [dev] │
│ Path │ hap-nodejs > @homebridge/dbus-native > optimist > minimist │
│ More info │ GHSA-xvch-5gv4-984h │
│ Moderate │ Prototype Pollution in minimist │
│ Package │ minimist │
│ Patched in │ >=0.2.1 │
│ Dependency of │ hap-nodejs [dev] │
│ Path │ hap-nodejs > @homebridge/dbus-native > optimist > minimist │
│ More info │ GHSA-vh95-rmgr-6w4m │
This dependency is coming from HAP-NodeJS. This issue is raised to bump these versions: homebridge/HAP-NodeJS#930
The text was updated successfully, but these errors were encountered: