---
title: "yargs-parser security advisories"
description: "1 known security advisory for yargs-parser, with the versions they affect and the version that fixes each."
url: https://inlinr.com/packages/yargs-parser/security
lang: en
---

[Packages](https://inlinr.com/packages)

# yargs-parser

22.0.0 · 26 May 2025 ISC 371M / week [Repository](https://github.com/yargs/yargs-parser) [Homepage](https://github.com/yargs/yargs-parser#readme) [npm](https://www.npmjs.com/package/yargs-parser) [Atom feed](https://inlinr.com/packages/feed/yargs-parser)

Your version 

## Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

| Line | Newest | Where it stands                                                                |
| ---- | ------ | ------------------------------------------------------------------------------ |
|      | 22.0.0 | No known advisory                                                              |
|      | 18.1.3 | 14 open advisories, worst moderate  · last release Apr 2020, no longer updated |

- Moderate  
[yargs-parser Vulnerable to Prototype Pollution](https://inlinr.com/advisories/GHSA-p9pc-299p-vxgp)GHSA-p9pc-299p-vxgp · 4 Sep 2020  
fixed in 18.1.1, 15.0.1, 13.1.2 +1

### Quality and security signals

What [npm](https://www.npmjs.com/package/yargs-parser) and [deps.dev](https://deps.dev/npm/yargs-parser) say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.