Jest: npm Audit for jest 24.9.0/25.1.0

[kamarajuPrathi]

gives me lot a moderate auidt issues more than 300-400
One error

Prototype Pollution
Package minimist
Patched in │ >=1.2.3

almost every audit is based on this

[damien-git]

related mkdirp issue

[SimenB]

We've removed mkdirp (#9486) so nothing for us to do. Will be fixed by the next release, whenever that is.

Upstream issue also seems fixed, so just do npm audit fix or whatever the command is

[damien-git]

npm audit fix doesn't seem to work:

fixed 0 of 553 vulnerabilities in 883413 scanned packages
  172 vulnerabilities required manual review and could not be updated
  2 package updates for 381 vulnerabilities involved breaking changes
  (use `npm audit fix --force` to install breaking changes; or refer to `npm audit` for steps to fix these manually)

[DanilaFadeev]

Same issue here with 25.1.0

[millette]

Related discussion: https://twitter.com/RoLLodeQc/status/1240468981456285696

npm audit fix doesn't upgrade to deprecated versions, as is the case with mkdirp 0.5.3.

[alexanderby]

So, the solution is to run npm install mkdirp --save-dev, then run npm uninstall mkdirp --save-dev.