-
-
Notifications
You must be signed in to change notification settings - Fork 3.1k
🚀 Feature: upgrade serialize-javascript dependency to address CVE-2026-34043 #5872
Copy link
Copy link
Open
Labels
status: in triagea maintainer should (re-)triage (review) this issuea maintainer should (re-)triage (review) this issuetype: featureenhancement proposalenhancement proposal
Description
Feature Request Checklist
- I have read and agree to Mocha's Code of Conduct and Contributing Guidelines
- I have searched for related issues and issues with the
faqlabel, but none matched my issue. - I want to provide a PR to resolve this
Overview
According to CVE-2026-34043 serialize-javascript < 7.0.5 is vulnerable to CPU Exhaustion Denial of Service via crafted array-like objects.
Suggested Solution
Upgrade the dependency serialize-javascript to version 7.0.5.
Alternatives
- remove the dependency, finding an alternative for it's provided functionality
- upgrade the dependency
serialize-javascriptto a version greater than 7.0.5
Additional Info
No response
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
status: in triagea maintainer should (re-)triage (review) this issuea maintainer should (re-)triage (review) this issuetype: featureenhancement proposalenhancement proposal