Upgrading minimist 0.2 to 1

Unknown0.2.4 → 1.2.8Security8New2Changed2Fixed9Other47

SecurityAdds a security notice for an additional prototype pollution issue.ef88b93 ↗

UnknownUpgrade verdict

DepDelta hasn't looked for the notes of 1 of 14 releases yet, so breaking changes can't be ruled out.

In plain terms

DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
Their commits are listed with this comparison.

Must act Top 3 of 8 that need code or config changes

What you must change

Security8

Adds a security notice for an additional prototype pollution issue.

1.2.6CHANGELOG.mdSummarizedView source

Prototype Pollution in minimist

Critical · CVSS 9.8

1.2.6GitHub AdvisoryOriginalView source

Adds a security notice regarding prototype pollution.

1.2.4CHANGELOG.mdSummarizedView source

Adds more failing prototype pollution tests.

1.2.3CHANGELOG.mdSummarizedView source

Adds even more aggressive checks for prototype pollution.

1.2.3CHANGELOG.mdSummarizedView source

Prototype Pollution in minimist

Moderate · CVSS 5.6

1.2.3GitHub AdvisoryOriginalView source

Adds a failing test for protocol pollution.

1.2.2CHANGELOG.mdSummarizedView source

Stops assigning onto __proto__ to prevent prototype pollution.

__proto__

1.2.2CHANGELOG.mdSummarizedView source