From f6321dad88a280ac7fa24afa2aa07c868d395586 Mon Sep 17 00:00:00 2001
From: bcoe <bencoe@google.com>
Date: Sat, 24 Oct 2020 19:15:20 -0700
Subject: [PATCH] deps(y18n): address prototype pollution issue
Fixes: CVE-2020-7774
Signed-off-by: rpm-build <rpm-build>
---
deps/npm/node_modules/y18n/index.js | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/deps/npm/node_modules/y18n/index.js b/deps/npm/node_modules/y18n/index.js
index d720681..727362a 100644
--- a/deps/npm/node_modules/y18n/index.js
+++ b/deps/npm/node_modules/y18n/index.js
@@ -11,7 +11,7 @@ function Y18N (opts) {
this.fallbackToLanguage = typeof opts.fallbackToLanguage === 'boolean' ? opts.fallbackToLanguage : true
// internal stuff.
- this.cache = {}
+ this.cache = Object.create(null)
this.writeQueue = []
}
--
2.28.0