ITADN

fix: resolve npm audit vulnerability

#1261Pull Requesttheluckystrike 创建于 2026-03-03
T
theluckystrikecommented
## Security Vulnerability Fix This PR resolves 1 npm audit vulnerability found in the Return YouTube Dislike extension. ### Vulnerability - **High**: Serialize JavaScript RCE (GHSA-5c6j-r48x-rmvq) - **Package**: serialize-javascript (via copy-webpack-plugin) ### Fixes Applied - copy-webpack-plugin: 11.0.0 -> 14.0.0 - filemanager-webpack-plugin: 9.0.1 -> 10.0.0 - jest: 28.1.3 -> 30.2.0 - echarts: 5.6.0 -> 6.0.0 ### Testing - Build verified successful: pnpm build --- *Submitted by T14 Security Scanner (zovo.one / theluckystrike)*
合并状态:未合并 关闭于 2026-03-03 1 条评论