Security issue serialize-javascript prior to 3.1.0 allows remote attackers #17858

Activity

1. alan-agius4

   added

   area: @angular-devkit/build-angular

   devkit/build-angular:browser

   devkit/build-angular:dev-server

   freq3: high

   severity6: security

   type: bug/fix

   on Jun 4, 2020
2. ngbot

   modified the milestone: Backlog on Jun 4, 2020
3. vikramdadwal commented on Jun 5, 2020

   

   vikramdadwal

   on Jun 5, 2020

   More actions

   We are facing this issue too, any ETA ?
4. filipesilva

   added 3 commits that reference this issue on Jun 8, 2020

   fix(@angular-devkit/build-angular): update copy-webpack-plugin to ver…

   ...

   This issue will close once commit a8ecbc8 is merged into the 'main' branch.

   a8ecbc8

   fix(@angular-devkit/build-angular): update copy-webpack-plugin to ver…

   ...

   This issue will close once commit 1a8de6f is merged into the 'main' branch.

   1a8de6f

   fix(@angular-devkit/build-angular): update copy-webpack-plugin to ver…

   ...

   This issue will close once commit 057411d is merged into the 'main' branch.

   057411d
5. filipesilva

   closed this as completedin #17750on Jun 9, 2020
6. filipesilva

   added a commit that references this issue on Jun 9, 2020

   fix(@angular-devkit/build-angular): update copy-webpack-plugin to ver…

   ...

   This issue will close once commit 01a0f1f is merged into the 'main' branch.

   01a0f1f
7. angular-automatic-lock-bot commented on Jul 10, 2020

   

   angular-automatic-lock-botbot

   on Jul 10, 2020

   More actions

   This issue has been automatically locked due to inactivity.
   Please file a new issue if you are encountering a similar or related problem.

   Read more about our automatic conversation locking policy.

   _{This action has been performed automatically by a bot.}
8. angular-automatic-lock-bot

   locked and limited conversation to collaborators on Jul 10, 2020
9. mostafaibr

   added a commit that references this issue on May 29, 2026

   fix(@angular-devkit/build-angular): update copy-webpack-plugin to ver…

   ...

   This issue will close once commit ec011e0 is merged into the 'master' branch.

   ec011e0