title: serialize-javascript vulnerability found in yarn.lock
body: <p>I created a React project using <code>npx create-react-app my-app</code> command. I then tested the project using <code>npm start</code>. When I commit the project to Github, I get a security advisory in the project page.</p>
  
  <pre><code>serialize-javascript vulnerability found in yarn.lock
  
  **Remediation**
  
  Upgrade serialize-javascript to version 2.1.1 or later. 
  </code></pre>
  
  <p>I do not have the serialize-javascript dependency in my package.json file. Here is the project in Github - <a href="https://github.com/shankarps/ReactPracticeProject/" rel="noreferrer">https://github.com/shankarps/ReactPracticeProject/</a></p>
  
  <p>How can i fix this error? </p>
  
  <p>How can i ensure that the latest dependencies are included in the project when it is created? </p>