From 353c61a9943ca0fd8e2848a86cb1fd99690fd805 Mon Sep 17 00:00:00 2001 From: dariia Date: Mon, 2 Nov 2026 17:45:14 +0100 Subject: [PATCH] fix(deps): bump serialize-javascript override to 7.1.4 Patch GHSA-m5mm-p8h7-m29v XSS in the Vue CLI build toolchain; 7.0.5 is still vulnerable. Co-authored-by: Cursor --- package-lock.json | 6 +++--- package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 73124db..0750f2e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9324,9 +9324,9 @@ } }, "node_modules/serialize-javascript": { - "version": "7.0.5", - "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.0.5.tgz", - "integrity": "sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==", + "version": "7.1.4", + "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.1.4.tgz", + "integrity": "sha512-FqlEuoTq/zRmA4Lg6aOqyH3lCHbUtCB0bmHCeFniX2GBdDqMJM3FwdvEhlE5Pim1dlt2FfBdVPmUNNiGhhKqpw==", "dev": true, "license": "BSD-3-Clause", "engines": { diff --git a/package.json b/package.json index 4e47ef6..8f3b165 100644 --- a/package.json +++ b/package.json @@ -43,7 +43,7 @@ "lodash": "^4.18.1", "follow-redirects": "^1.16.0", "vue-template-compiler": "npm:vue-template-compiler-patched@^2.7.16-patch.2", - "serialize-javascript": "7.0.5", + "serialize-javascript": "7.1.4", "svgo": ">=2.8.1", "qs": ">=6.15.2", "uuid": "11.1.1",