Jason Woltje a829271b66 fix: override serialize-javascript to >=7.0.3 for audit compliance ...

Newly disclosed RCE vulnerability (GHSA-5c6j-r48x-rmvq) in
serialize-javascript <=7.0.2, pulled in as a transitive devDependency
via @nestjs/cli > webpack > terser-webpack-plugin. pnpm override bumps
it to the patched version.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-28 09:10:25 -06:00

2.6 KiB

Raw Blame History

View Raw