chore(deps): bump qs from 6.5.2 to 6.5.3

[dependabot]

Bumps qs from 6.5.2 to 6.5.3.

Changelog

Sourced from qs's changelog.

6.5.3

• [Fix] parse: ignore __proto__ keys (#428)
• [Fix] utils.merge: avoid a crash with a null target and a truthy non-array source
• [Fix] correctly parse nested arrays
• [Fix] stringify: fix a crash with strictNullHandling and a custom filter/serializeDate (#279)
• [Fix] utils: merge: fix crash when source is a truthy primitive & no options are provided
• [Fix] when parseArrays is false, properly handle keys ending in []
• [Fix] fix for an impossible situation: when the formatter is called with a non-string value
• [Fix] utils.merge: avoid a crash with a null target and an array source
• [Refactor] utils: reduce observable [[Get]]s
• [Refactor] use cached Array.isArray
• [Refactor] stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)
• [Refactor] parse: only need to reassign the var once
• [Robustness] stringify: avoid relying on a global undefined (#427)
• [readme] remove travis badge; add github actions/codecov badges; update URLs
• [Docs] Clean up license text so it’s properly detected as BSD-3-Clause
• [Docs] Clarify the need for "arrayLimit" option
• [meta] fix README.md (#399)
• [meta] add FUNDING.yml
• [actions] backport actions from main
• [Tests] always use String(x) over x.toString()
• [Tests] remove nonexistent tape option
• [Dev Deps] backport from main

Commits

• 298bfa5 v6.5.3
• ed0f5dc [Fix] parse: ignore __proto__ keys (#428)
• 691e739 [Robustness] stringify: avoid relying on a global undefined (#427)
• 1072d57 [readme] remove travis badge; add github actions/codecov badges; update URLs
• 12ac1c4 [meta] fix README.md (#399)
• 0338716 [actions] backport actions from main
• 5639c20 Clean up license text so it’s properly detected as BSD-3-Clause
• 51b8a0b add FUNDING.yml
• 45f6759 [Fix] fix for an impossible situation: when the formatter is called with a no...
• f814a7f [Dev Deps] backport from main
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

The following labels could not be found: dependencies.

[guardrails]

⚠️ We detected 516 security issues in this pull request:

Mode: paranoid | Total findings: 516 | Considered vulnerability: 516

Insecure Processing of Data (183)

Docs	Details
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/test/BinaryMiddleware.unittest.js Line 125 in 5e38f9d const newData = mw.deserialize(serialized, {});
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/tooling/print-cache-file.js Line 158 in 5e38f9d const structure = await rawSerializer.deserialize(null, {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/tooling/print-cache-file.js Line 168 in 5e38f9d const data = await serializer.deserialize(null, {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/RawModule.js Line 138 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/RawModule.js Line 146 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/DependenciesBlock.js Line 87 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ModuleWarning.js Line 50 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ModuleWarning.js Line 55 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ContextModule.js Line 1069 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ContextModule.js Line 1073 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/FileSystemInfo.js Line 351 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ExportsInfo.js Line 54 in 5e38f9d static deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/AsyncDependenciesBlock.js Line 76 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/AsyncDependenciesBlock.js Line 81 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ModuleError.js Line 50 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ModuleError.js Line 55 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/WebpackError.js Line 49 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ModuleBuildError.js Line 66 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ModuleBuildError.js Line 71 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/Module.js Line 977 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/Module.js Line 991 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ModuleParseError.js Line 98 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ModuleParseError.js Line 103 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/Dependency.js Line 278 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/DelegatedModule.js Line 199 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/DelegatedModule.js Line 208 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/NormalModule.js Line 1288 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/NormalModule.js Line 1306 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/NormalModule.js Line 1310 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/NormalModule.js Line 1316 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ExternalModule.js Line 191 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ExternalModule.js Line 682 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/ExternalModule.js Line 689 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/DllModule.js Line 130 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/DllModule.js Line 132 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/optimize/ConcatenatedModule.js Line 1832 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/optimize/ConcatenatedModule.js Line 1839 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/container/ContainerEntryModule.js Line 267 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/container/ContainerEntryModule.js Line 270 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/container/FallbackDependency.js Line 38 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/container/FallbackDependency.js Line 41 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/container/FallbackModule.js Line 163 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/container/FallbackModule.js Line 166 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/container/ContainerExposedDependency.js Line 41 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/container/ContainerExposedDependency.js Line 43 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/container/RemoteModule.js Line 159 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/container/RemoteModule.js Line 162 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/sharing/ProvideSharedDependency.js Line 43 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/sharing/ProvideSharedDependency.js Line 53 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/sharing/ProvideSharedModule.js Line 169 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/sharing/ProvideSharedModule.js Line 172 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/sharing/ConsumeSharedModule.js Line 233 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/sharing/ConsumeSharedModule.js Line 236 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/ArraySerializer.js Line 12 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/RegExpObjectSerializer.js Line 12 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/SingleItemMiddleware.js Line 29 in 5e38f9d deserialize(data, context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/MapObjectSerializer.js Line 17 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/FileMiddleware.js Line 314 in 5e38f9d memoize(() => deserialize(middleware, name, readFile)),
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/FileMiddleware.js Line 494 in 5e38f9d deserialize(data, context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/FileMiddleware.js Line 609 in 5e38f9d return deserialize(this, false, readFile);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/SetObjectSerializer.js Line 14 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/DateObjectSerializer.js Line 11 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/BinaryMiddleware.js Line 507 in 5e38f9d deserialize(data, context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/BinaryMiddleware.js Line 508 in 5e38f9d return this._deserialize(data, context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/BinaryMiddleware.js Line 513 in 5e38f9d memoize(() => this._deserialize(content, context)),
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/BinaryMiddleware.js Line 522 in 5e38f9d this._deserialize(data, context)
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/BinaryMiddleware.js Line 531 in 5e38f9d _deserialize(data, context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/SerializerMiddleware.js Line 36 in 5e38f9d deserialize(data, context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/SerializerMiddleware.js Line 123 in 5e38f9d return r.then(data => deserialize(data));
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/SerializerMiddleware.js Line 125 in 5e38f9d return deserialize(r);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/PlainObjectSerializer.js Line 66 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/NullPrototypeObjectSerializer.js Line 18 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/ObjectMiddleware.js Line 555 in 5e38f9d deserialize(data, context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/ObjectMiddleware.js Line 649 in 5e38f9d const item = serializer.deserialize(ctx);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/ObjectMiddleware.js Line 700 in 5e38f9d data => this.deserialize(data, context)[0]
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/Serializer.js Line 33 in 5e38f9d deserialize(value, context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/Serializer.js Line 39 in 5e38f9d current = current.then(data => middleware.deserialize(data, context));
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/Serializer.js Line 41 in 5e38f9d current = middleware.deserialize(current, ctx);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/serialization/ErrorObjectSerializer.js Line 17 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ModuleDecoratorDependency.js Line 83 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ModuleDecoratorDependency.js Line 87 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RequireResolveHeaderDependency.js Line 32 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RequireResolveHeaderDependency.js Line 34 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ModuleDependency.js Line 55 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ModuleDependency.js Line 60 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CommonJsExportRequireDependency.js Line 277 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CommonJsExportRequireDependency.js Line 286 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/AMDRequireContextDependency.js Line 36 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/AMDRequireContextDependency.js Line 42 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ImportDependency.js Line 60 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ImportDependency.js Line 63 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CommonJsSelfReferenceDependency.js Line 65 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CommonJsSelfReferenceDependency.js Line 71 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/AMDRequireArrayDependency.js Line 41 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/AMDRequireArrayDependency.js Line 47 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/DllEntryDependency.js Line 32 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/DllEntryDependency.js Line 38 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/WebAssemblyExportImportedDependency.js Line 54 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/WebAssemblyExportImportedDependency.js Line 61 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ConstDependency.js Line 64 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ConstDependency.js Line 69 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyExportExpressionDependency.js Line 66 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyExportExpressionDependency.js Line 72 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RequireContextDependency.js Line 31 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RequireContextDependency.js Line 36 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/URLDependency.js Line 88 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/URLDependency.js Line 93 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/PureExpressionDependency.js Line 58 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/PureExpressionDependency.js Line 62 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyAcceptDependency.js Line 43 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyAcceptDependency.js Line 48 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CommonJsRequireContextDependency.js Line 33 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CommonJsRequireContextDependency.js Line 39 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyImportDependency.js Line 207 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyImportDependency.js Line 210 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/AMDDefineDependency.js Line 133 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/AMDDefineDependency.js Line 141 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ImportContextDependency.js Line 37 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ImportContextDependency.js Line 43 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ContextElementDependency.js Line 60 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ContextElementDependency.js Line 62 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CommonJsFullRequireDependency.js Line 62 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CommonJsFullRequireDependency.js Line 67 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyExportHeaderDependency.js Line 33 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyExportHeaderDependency.js Line 37 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyImportSpecifierDependency.js Line 214 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyImportSpecifierDependency.js Line 226 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/LocalModuleDependency.js Line 34 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/LocalModuleDependency.js Line 41 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ContextDependency.js Line 114 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ContextDependency.js Line 127 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RequireResolveContextDependency.js Line 33 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RequireResolveContextDependency.js Line 39 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RequireHeaderDependency.js Line 29 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RequireHeaderDependency.js Line 31 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/AMDRequireDependency.js Line 46 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/AMDRequireDependency.js Line 56 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/WebAssemblyImportDependency.js Line 84 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/WebAssemblyImportDependency.js Line 91 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ExportsInfoDependency.js Line 94 in 5e38f9d static deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ExportsInfoDependency.js Line 100 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/JsonExportsDependency.js Line 84 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/JsonExportsDependency.js Line 87 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/UnsupportedDependency.js Line 32 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/UnsupportedDependency.js Line 38 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyExportSpecifierDependency.js Line 59 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyExportSpecifierDependency.js Line 63 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/LocalModule.js Line 33 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/StaticExportsDependency.js Line 53 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/StaticExportsDependency.js Line 57 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RuntimeRequirementsDependency.js Line 44 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RuntimeRequirementsDependency.js Line 47 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyExportImportedSpecifierDependency.js Line 847 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyExportImportedSpecifierDependency.js Line 858 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/HarmonyExportImportedSpecifierDependency.js Line 1229 in 5e38f9d deserialize({ read, setCircularReference }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ProvidedDependency.js Line 65 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/ProvidedDependency.js Line 69 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CommonJsExportsDependency.js Line 65 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CommonJsExportsDependency.js Line 71 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RequireEnsureDependency.js Line 40 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/RequireEnsureDependency.js Line 47 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CachedConstDependency.js Line 54 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/dependencies/CachedConstDependency.js Line 61 in 5e38f9d super.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/cache/ResolverCachePlugin.js Line 28 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/cache/PackFileCacheStrategy.js Line 61 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/cache/PackFileCacheStrategy.js Line 507 in 5e38f9d deserialize({ read, logger }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/cache/PackFileCacheStrategy.js Line 627 in 5e38f9d deserialize({ read, logger, profile }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/cache/PackFileCacheStrategy.js Line 927 in 5e38f9d .deserialize(null, {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/registerExternalSerializer.js Line 56 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/registerExternalSerializer.js Line 83 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/registerExternalSerializer.js Line 109 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/registerExternalSerializer.js Line 136 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/registerExternalSerializer.js Line 171 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/registerExternalSerializer.js Line 211 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/registerExternalSerializer.js Line 240 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/registerExternalSerializer.js Line 274 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/registerExternalSerializer.js Line 301 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/registerExternalSerializer.js Line 333 in 5e38f9d deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/LazySet.js Line 196 in 5e38f9d static deserialize({ read }) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/makeSerializable.js Line 18 in 5e38f9d deserialize(context) {
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/makeSerializable.js Line 20 in 5e38f9d return this.Constructor.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/util/makeSerializable.js Line 23 in 5e38f9d obj.deserialize(context);
💡	Title: Insecure Deserialization (gRPC), Severity: High webpack/lib/json/JsonData.js Line 36 in 5e38f9d deserialize({ read }) {

More info on how to fix Insecure Processing of Data in JavaScript.

---

Insecure File Management (281)

Docs	Details
💡	Title: Use of non-literal require, Severity: High webpack/bin/webpack.js Line 67 in 5e38f9d const pkg = require(pkgPath);
💡	Title: Use of non-literal require, Severity: High webpack/bin/webpack.js Line 69 in 5e38f9d require(path.resolve(path.dirname(pkgPath), pkg.bin[cli.binName]));
💡	Title: Use of non-literal require, Severity: High webpack/examples/aggressive-merging/pageA.js Line 1 in 5e38f9d require(["./common"], function(common) {
💡	Title: Use of non-literal require, Severity: High webpack/examples/aggressive-merging/pageB.js Line 1 in 5e38f9d require(["./common"], function(common) {
💡	Title: Use of non-literal require, Severity: High webpack/examples/aggressive-merging/pageC.js Line 1 in 5e38f9d require(["./a"], function(a) {
💡	Title: Use of non-literal require, Severity: High webpack/examples/code-splitted-require.context-amd/example.js Line 2 in 5e38f9d require(["../require.context/templates/"+templateName], function(tmpl) {
💡	Title: Use of non-literal require, Severity: High webpack/examples/code-splitted-require.context/example.js Line 3 in 5e38f9d callback(require("../require.context/templates/"+templateName)());
💡	Title: Use of non-literal require, Severity: High webpack/examples/extra-async-chunk-advanced/example.js Line 1 in 5e38f9d require(["./a", "./b", "./c"], function(a, b, c) {});
💡	Title: Use of non-literal require, Severity: High webpack/examples/extra-async-chunk/example.js Line 2 in 5e38f9d require(["./a", "./b", "./c"]);
💡	Title: Use of non-literal require, Severity: High webpack/examples/http2-aggressive-splitting/example.js Line 2 in 5e38f9d require(["react-dom"]);
💡	Title: Use of non-literal require, Severity: High webpack/examples/mixed/commonjs.js Line 5 in 5e38f9d require(
💡	Title: Use of non-literal require, Severity: High webpack/examples/mixed/example.js Line 7 in 5e38f9d require([
💡	Title: Use of non-literal require, Severity: High webpack/test/BuildDependencies.test.js Line 176 in 5e38f9d require(`./js/buildDeps/${i}/main.js`)
💡	Title: Use of non-literal require, Severity: High webpack/test/HotTestCases.template.js Line 289 in 5e38f9d } else return require(module);
💡	Title: Use of non-literal require, Severity: High webpack/test/ProfilingPlugin.test.js Line 35 in 5e38f9d const data = require(finalPath);
💡	Title: Use of non-literal require, Severity: High webpack/test/StatsTestCases.basictest.js Line 60 in 5e38f9d options = require(path.join(base, testName, "webpack.config.js"));
💡	Title: Use of non-literal require, Severity: High webpack/test/StatsTestCases.basictest.js Line 67 in 5e38f9d require(path.join(base, testName, "test.config.js"))
💡	Title: Use of non-literal require, Severity: High webpack/test/TestCases.template.js Line 75 in 5e38f9d testConfig = require(testConfigPath);
💡	Title: Use of non-literal require, Severity: High webpack/test/TestCases.template.js Line 418 in 5e38f9d } else return require(module);
💡	Title: Use of non-literal require, Severity: High webpack/examples/multiple-entry-points/pageA.js Line 2 in 5e38f9d require(["./shared"], function(shared) {
💡	Title: Use of non-literal require, Severity: High webpack/examples/require.context/example.js Line 2 in 5e38f9d return require("./templates/"+templateName);
💡	Title: Use of non-literal require, Severity: High webpack/lib/ProgressPlugin.js Line 412 in 5e38f9d require(loader.loader);
💡	Title: Use of non-literal require, Severity: High webpack/lib/hmr/HotModuleReplacement.runtime.js Line 79 in 5e38f9d return require(request);

---

This comment has been truncated due to comment length limitations, please go to the dashboard for further details.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.