security notice

minimistjs · Mar 11, 2020 · 4cf1354 · 4cf1354
1 parent 1043d21
commit 4cf1354
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/readme.markdown b/readme.markdown
@@ -29,6 +29,13 @@ $ node example/parse.js -x 3 -y 4 -n5 -abc --beep=boop foo bar baz
   beep: 'boop' }
 ```
 
+# security
+
+Previous versions had a prototype pollution bug that could cause privilege
+escalation in some circumstances when handling untrusted user input.
+
+Please use version 1.2.3 or later: https://snyk.io/vuln/SNYK-JS-MINIMIST-559764
+
 # methods
 
 ``` js