yargs-parser vulnerability

[nessor]

• Node Version: 12.16.1

• NPM Version: 6.13.4

• OS: Ubuntu 19.10

• This is a bug

• This is a modification request

Hey guys,

npm is reporting a Prototype Pollution vulnerability on the yargs-parser dependency

Low Prototype Pollution
Package yargs-parser
Patched in >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2
Dependency of webpack-dev-server [dev]
Path webpack-dev-server > yargs > yargs-parser
More info https://npmjs.com/advisories/1500

[panuhorsmalahti]

Fix should be to update the yargs dependency.

[gbhasha]

Snyk Report: https://snyk.io/test/npm/webpack-dev-server