tiennm99 87eed879ef chore(deps): override transitive vulns — serialize-javascript + cookie ...

`@vite-pwa/sveltekit` pulled in `serialize-javascript@6.0.2` via
workbox-build → @rollup/plugin-terser, which is flagged for High RCE
(GHSA-5c6j-r48x-rmvq) and Medium DoS (GHSA-qj8w-gfj5-8c6v). Both fix
to >=7.0.5.

Also opportunistically bump `cookie` past 0.7.0 (Low GHSA-pxg6-pf52-xh8x)
via @sveltejs/kit — was the last-remaining Dependabot Low.

Build-time tooling only — neither package ships to the browser. Pinned
via npm `overrides` rather than `audit fix --force` because the latter
would downgrade @vite-pwa/sveltekit to 0.0.1 (breaking).

npm audit: 0 vulnerabilities. Tests 115/115. Build clean.

2026-04-27 20:43:32 +07:00

android

docs: add post-implementation todo list

2026-04-27 20:21:37 +07:00

web

chore(deps): override transitive vulns — serialize-javascript + cookie

2026-04-27 20:43:32 +07:00

S

Description

Lô Tô (Vietnamese lottery bingo) number board — Next.js web app

bingogamelottonextjstypescriptvietnam

4.1 MiB

0 Stars 1 Watchers 0 Forks

Languages

TypeScript 89.9%

CSS 8%

JavaScript 2.1%