Advisories for Npm/Yar package

Versions of yar prior to 2.2.0 are affected by a denial of service vulnerability related to an invalid encrypted session cookie value. When an invalid encryped session cookie value is provided, the process will crash. Recommendation Update to version 2.2.0 or later.

Yar uses an encrypted cookie for session support which can crash the process if it contains an invalid value.