Security warning for "mem"

WS-2018-0236 More information
moderate severity
Vulnerable versions: < 4.0.0
Patched version: 4.0.0
In nodejs-mem before version 4.0.0 there is a memory leak due to old results not being removed from the cache despite reaching maxAge. Exploitation of this can lead to exhaustion of memory and subsequent denial of service.

npm ls mem shows:

└─┬ eslint-find-rules@3.3.1
  └─┬ yargs@8.0.2
    └─┬ os-locale@2.1.0
      └── mem@1.1.0 

[ljharb]

We can revisit updating yargs past v11 if node 4 is dropped in the future.

[Xotic750]

I understand the effort part. 😃 I was not overly concerned, but explain that to my manager. 😄