From f6321dad88a280ac7fa24afa2aa07c868d395586 Mon Sep 17 00:00:00 2001

From: bcoe <bencoe@google.com>

Date: Sat, 24 Oct 2020 19:15:20 -0700

Subject: [PATCH] deps(y18n): address prototype pollution issue

Fixes: CVE-2020-7774

Signed-off-by: rpm-build <rpm-build>

---

 deps/npm/node_modules/y18n/index.js | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deps/npm/node_modules/y18n/index.js b/deps/npm/node_modules/y18n/index.js

index d720681..727362a 100644

--- a/deps/npm/node_modules/y18n/index.js

+++ b/deps/npm/node_modules/y18n/index.js

@@ -11,7 +11,7 @@ function Y18N (opts) {

   this.fallbackToLanguage = typeof opts.fallbackToLanguage === 'boolean' ? opts.fallbackToLanguage : true

   // internal stuff.

-  this.cache = {}

+  this.cache = Object.create(null)

   this.writeQueue = []

 }

-- 

2.28.0