Prototype Override Protection Bypass Vulnerability

[drewjenkins]

See https://app.snyk.io/test/npm/http-server/0.11.1

Also wrote up an issue on union's github flatiron/union#59

To resolve, wait for union to update their version of qs or remove the dependency

[thornjad]

PR submitted to union flatiron/union#61

[BigBlueHat]

Just bumped the flatiron/union issue and hopefully that unblocks this issue. However, we do need to address this sooner than later.

[jumoog]

"ecstatic": "^3.3.1" 👍

[github-actions]

This issue has been inactive for 180 days

[thornjad]

This should be fixed as of http-server v13.0.0, please re-open if this is not the case