chore(deps): update dependency serialize-javascript to v6.0.2 [security]

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Confidence
serialize-javascript	6.0.1 -> 6.0.2

GitHub Vulnerability Alerts

CVE-2024-11831

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.

---

Release Notes

yahoo/serialize-javascript (serialize-javascript)

v6.0.2

Compare Source

• fix: serialize URL string contents to prevent XSS (#​173) f27d65d
• Bump @​babel/traverse from 7.10.1 to 7.23.7 (#​171) 02499c0
• docs: update readme with URL support (#​146) 0d88527
• chore: update node version and lock file e2a3a91
• fix typo (#​164) 5a1fa64

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel[bot]]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
blog	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 8, 2025 2:08pm

[changeset-bot[bot]]

⚠️ No Changeset found

Latest commit: e6a6e264487941170f8ba656ff619309da89ec94

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security[bot]]

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected] ➜ 6.0.2	None	0	16.9 kB	redonkulus

View full report↗︎