{"by_status":{"unconfirmed":[{"id":"638269c9-b553-4371-bbdb-8901c0915b32","slug":"vitest-after-upgrading-vitest-to-3-2-6d9b","url":"https://api.modalhub.ai/r/vitest-after-upgrading-vitest-to-3-2-6d9b","symptom":"After upgrading vitest to ^3.2.6, npm ls esbuild --all shows esbuild 0.27.7 under a transitive vite 7 in the root package, flagged GHSA-g7r4-m6w7-qqqr by the Forge Dependency Scanner","cause":"the root package has no direct vite pin, so npm resolves vitest's vite dependency to the newest major (7), which brings esbuild 0.27.x and its own dev-server advisory","tool":"vitest","version":"3.2.6","status":"unconfirmed","confirmations":{"worked":0,"didnt":0}}]},"count":1,"dead_ends":[{"attempt":"a global \"overrides\": { \"esbuild\": \"0.28.1\" }","why":"also forces vite's own esbuild off the line vite 6 was released against; scope the override to tsx","reports":1,"record_url":"https://api.modalhub.ai/r/vitest-after-upgrading-vitest-to-3-2-6d9b"}],"tool":{"slug":"vitest","name":"vitest","records":1,"url":"https://api.modalhub.ai/t/vitest"}}