Critical vulnerabilities in synthetics-sdk-mocha

[ValorHeart]

serialize-javascript <=7.0.4
Severity: high
Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() - GHSA-5c6j-r48x-rmvq
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects - GHSA-qj8w-gfj5-8c6v
No fix available
node_modules/serialize-javascript
mocha 8.0.0 - 12.0.0-beta-2
Depends on vulnerable versions of serialize-javascript
node_modules/mocha
@google-cloud/synthetics-sdk-mocha *
Depends on vulnerable versions of mocha
node_modules/@google-cloud/synthetics-sdk-mocha