fix: the ini npm package before version 1.3.6 has a Prototype Polluti…

…on vulnerability.
brunurd · Dec 10, 2020 · d8bb9dc · d8bb9dc
1 parent 880a914
commit d8bb9dc
Show file tree

Hide file tree

Showing 3 changed files with 264 additions and 192 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -14,6 +14,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ### Fix
 - Development start command open two instance of the window.
+- The `ini` npm package before version 1.3.6 has a Prototype Pollution vulnerability.
 
 ---
-Original file line number
+Diff line change
@@ Expand Up @@
     ### Fix
     - Development start command open two instance of the window.
+    - The `ini` npm package before version 1.3.6 has a Prototype Pollution vulnerability.
     ---
@@ Expand Down @@