From f6321dad88a280ac7fa24afa2aa07c868d395586 Mon Sep 17 00:00:00 2001 From: bcoe Date: Sat, 24 Oct 2020 19:15:20 -0700 Subject: [PATCH] deps(y18n): address prototype pollution issue Fixes: CVE-2020-7774 Signed-off-by: rpm-build --- deps/npm/node_modules/y18n/index.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deps/npm/node_modules/y18n/index.js b/deps/npm/node_modules/y18n/index.js index d720681..727362a 100644 --- a/deps/npm/node_modules/y18n/index.js +++ b/deps/npm/node_modules/y18n/index.js @@ -11,7 +11,7 @@ function Y18N (opts) { this.fallbackToLanguage = typeof opts.fallbackToLanguage === 'boolean' ? opts.fallbackToLanguage : true // internal stuff. - this.cache = {} + this.cache = Object.create(null) this.writeQueue = [] } -- 2.28.0