[vuln-sentinel] LOW npm esbuild: 1 known vulnerability #7

Package: esbuild (npm)
Upgrade to: 0.28.1 or later
Found in: web/package-lock.json

Automatic upgrade to 0.28.1 failed in web/package-lock.json: the upgrade did not remove the vulnerable version (version constraint conflict)

Daily report: https://github.com/dennislee928/vuln-ops/blob/main/reports/2026-11-02.md

_{Managed by vuln-sentinel. This issue closes automatically once the vulnerable versions are gone from the default branch.}