Vulnerability in decode-uri-component
I can't think of anything better to start off the new year.
https://github.com/advisories/GHSA-w573-4hg7-7wgq
There have been at least 11 other vulnerabilities (we are up to 20 including this one) while I was away