Merge pull request #806 from microsoft/copilot/fix-serialize-javascript-vulnerability-again

[Lesson 13] Update vulnerable serialize-javascript dependency
main
Lee Stott 6 days ago committed by GitHub
commit 2bdd6414df
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

@ -1,6 +1,6 @@
# Dangerous Liaisons data visualization project
To get started, you need to ensure that you have NPM and Node running on your machine. Install the dependencies (npm install) and then run the project locally (npm run serve):
To get started, you need to ensure that you have NPM and Node **>=20.0.0** running on your machine. Install the dependencies (npm install) and then run the project locally (npm run serve):
## Project setup
```

@ -41,14 +41,11 @@
"not dead"
],
"engines": {
"node": ">=18.12.0"
"node": ">=20.0.0"
},
"overrides": {
"qs": "6.14.2",
"braces": ">=3.0.3",
"serialize-javascript": "7.0.5"
},
"engines": {
"node": ">=20.0.0"
}
}

@ -1,6 +1,6 @@
# Dangerous Liaisons data visualization project
To get started, you need to ensure that you have NPM and Node running on your machine. Install the dependencies (npm install) and then run the project locally (npm run serve):
To get started, you need to ensure that you have NPM and Node **>=20.0.0** running on your machine. Install the dependencies (npm install) and then run the project locally (npm run serve):
## Project setup
```

@ -10146,15 +10146,6 @@
}
]
},
"node_modules/randombytes": {
"version": "2.1.0",
"resolved": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
"integrity": "sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==",
"dev": true,
"dependencies": {
"safe-buffer": "^5.1.0"
}
},
"node_modules/range-parser": {
"version": "1.2.1",
"resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
@ -10576,13 +10567,13 @@
}
},
"node_modules/serialize-javascript": {
"version": "6.0.2",
"resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz",
"integrity": "sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==",
"version": "7.0.5",
"resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.0.5.tgz",
"integrity": "sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==",
"dev": true,
"license": "BSD-3-Clause",
"dependencies": {
"randombytes": "^2.1.0"
"engines": {
"node": ">=20.0.0"
}
},
"node_modules/serve-index": {

@ -40,6 +40,9 @@
"last 2 versions",
"not dead"
],
"engines": {
"node": ">=20.0.0"
},
"overrides": {
"qs": "6.14.2",
"braces": ">=3.0.3",
@ -48,6 +51,7 @@
},
"webpack-bundle-analyzer": {
"ws": "7.5.11"
}
},
"serialize-javascript": "7.0.5"
}
}

Loading…
Cancel
Save