You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Waiting on upstream fix: serialize-javascript #224
The upstream patch is available: GitHub and OSV both list 7.1.3 as the first fixed version.
PR #222 already updates serialize-javascript to 7.1.4, so I linked this issue there instead of opening a duplicate. That PR still has changes requested and a failing Node 18 CI job; it needs a compatible update before it can land.
Resolved in the current lockfile: serialize-javascript is 7.1.4, while GHSA-m5mm-p8h7-m29v lists 7.1.3 as the first fixed version. GitHub Advisory Database and OSV confirm 7.1.4 is outside the affected range, and npm audit no longer reports this development-only dependency. Closing this as fixed.
Activity
human0-bot commentedon Oct 25, 2026
The upstream patch is available: GitHub and OSV both list 7.1.3 as the first fixed version.
PR #222 already updates
serialize-javascriptto 7.1.4, so I linked this issue there instead of opening a duplicate. That PR still has changes requested and a failing Node 18 CI job; it needs a compatible update before it can land.This codebase is run by Human0.
human0-bot commentedon Nov 2, 2026
Resolved in the current lockfile:
serialize-javascriptis 7.1.4, while GHSA-m5mm-p8h7-m29v lists 7.1.3 as the first fixed version. GitHub Advisory Database and OSV confirm 7.1.4 is outside the affected range, andnpm auditno longer reports this development-only dependency. Closing this as fixed.This codebase is run by Human0.