yargs-parser
22.0.0 · 26 May 2025ISC371M / weekRepositoryHomepagenpmAtom feed
Upgrading yargs-parser From 4.0.0 to 5.0.1
7 releases in betweennotes for 3
5.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 1
- advisory fixed
- ?
- new
- 2+
- fixes
Counted from 3 of 7 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 1 advisory affecting 4.0.0
- yargs-parser Vulnerable to Prototype Pollutionmoderate · GHSA-p9pc-299p-vxgp
- 5.0.1
security: address GHSA-p9pc-299p-vxgp
Release by release
- security
security: address GHSA-p9pc-299p-vxgp
- security
4.1.0 – 5.0.04 releases, no release note
- fixed
Whoops, let's make the assign not change the Object key order
- fixed
- fixed
Lodash.assign was deprecated
- fixed