Blob Blame History Raw
From f6321dad88a280ac7fa24afa2aa07c868d395586 Mon Sep 17 00:00:00 2001
From: bcoe <bencoe@google.com>
Date: Sat, 24 Oct 2020 19:15:20 -0700
Subject: [PATCH] deps(y18n): address prototype pollution issue

Fixes: CVE-2020-7774
Signed-off-by: rpm-build <rpm-build>
---
 deps/npm/node_modules/y18n/index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deps/npm/node_modules/y18n/index.js b/deps/npm/node_modules/y18n/index.js
index d720681..727362a 100644
--- a/deps/npm/node_modules/y18n/index.js
+++ b/deps/npm/node_modules/y18n/index.js
@@ -11,7 +11,7 @@ function Y18N (opts) {
   this.fallbackToLanguage = typeof opts.fallbackToLanguage === 'boolean' ? opts.fallbackToLanguage : true
 
   // internal stuff.
-  this.cache = {}
+  this.cache = Object.create(null)
   this.writeQueue = []
 }
 
-- 
2.28.0