fix: patch serialize-javascript RCE and minimatch ReDoS vulnerabilities#484

Open

rickalee wants to merge 2 commits into

10up:developfrom

rickalee:fix/security-serialize-javascript

Commits on Mar 31, 2026

fix: bump copy-webpack-plugin and image-minimizer-webpack-plugin to resolve serialize-javascript CVEs
rickalee
committed
Add minimatch override to fix ReDoS CVEs GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74
rickalee
committed