npm vulnerability intelligence
yargs-parser
NPM Package
Vulnerability Check
the mighty option parser used by yargs
Moderate ISC
v22.0.0
Vulnerability Analysis
OSV Live
yargs-parser
v22.0.0 · ISC · 202,869,019 dl/wk
Advisory Breakdown
Severity Rating
Moderate1 advisory
Moderate
Weekly downloads
202,869,019
Total advisories
1
Latest version
22.0.0
License
ISC
Known advisories
OSV records for the npm ecosystem
GHSA-p9pc-299p-vxgp CVE-2020-7608 moderate
yargs-parser Vulnerable to Prototype Pollution
Affected: >=6.0.0 <13.1.2, >=14.0.0 <15.0.1, >=16.0.0 <18.1.1, >=0 <5.0.1 Fixed in: 13.1.2, 15.0.1, 18.1.1, 5.0.1 Updated Mar 13, 2026
View source
Checked Jun 6, 2026, 5:09 AM from npm and OSV.dev
Package metadata
From the npm registry
- Package name
- yargs-parser
- Ecosystem
- npm
- Latest version
- 22.0.0
- License
- ISC
- Weekly downloads
- 202,869,019
- Repository
- Open repository
Remediation boundary
What RequestGuard does — and doesn't — cover
RequestGuard does not fix npm package vulnerabilities. Dependency remediation happens through package updates, patches, lockfile changes, and maintainer guidance. RequestGuard can help mitigate runtime abuse around exposed web and API flows while remediation is handled separately.
Data from npm registry and OSV.dev · Checked 6/6/2026, 5:09:52 AM