Commit 6bf68ea
committed
[build] Fix vulnerability in serialize-javascript <=7.0.4
```
npm audit report
serialize-javascript <7.0.5
Severity: moderate
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects - GHSA-qj8w-gfj5-8c6v
fix available via `npm audit fix --force`
Will install mocha@7.2.0, which is a breaking change
node_modules/serialize-javascript
mocha 8.0.0 - 12.0.0-beta-2
Depends on vulnerable versions of serialize-javascript
node_modules/mocha
terser-webpack-plugin <=5.3.16
Depends on vulnerable versions of serialize-javascript
node_modules/terser-webpack-plugin
```
Fixes: https://github.com/redhat-developer/vscode-openshift-tools/security/dependabot/149
Signed-off-by: Victor Rubezhny <vrubezhny@redhat.com>1 parent 20a43af commit 6bf68ea
2 files changed
Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
200 | 200 | | |
201 | 201 | | |
202 | 202 | | |
203 | | - | |
| 203 | + | |
204 | 204 | | |
205 | 205 | | |
206 | 206 | | |
| |||
0 commit comments