one way to address this is importing this as a debian/patch: https://github.com/yarnpkg/yarn/commit/2f08a7405cc3f6fe47c30293050bb0ac94850932
Paolo
- Bug#941354: node-yarnpkg: CVE-2019-5448 Salvatore Bonaccorso
- Bug#941354: upstream patch link Paolo Greppi
- Bug#941354: proposed fix Paolo Greppi
- Bug#941354: [Pkg-javascript-devel] Bug#94135... Pirate Praveen
- Bug#941354: proposed fix Salvatore Bonaccorso
- Bug#941354: node-yarnpkg: CVE-2019-5448 Xavier
- Bug#941354: node-yarnpkg: CVE-2019-5448 Salvatore Bonaccorso
