Loader-utils give vue-pdf a critical warning
the-missing-pink opened this issue · comments
Loader-utils make that vue-pdf get a critical warning in npm audit.
Message: Prototype pollution in webpack loader-utils
url of the warning: GHSA-76p3-8jx3-jpfq
The latest possible version of loader-utils that can be installed is 1.4.2 because of the following conflicting dependencies:
vue-pdf@4.3.0 requires loader-utils@^1.4.0
vue-pdf@4.3.0 requires loader-utils@^1.0.0 via worker-loader@2.0.0
The earliest fixed version of loader-utils is 2.0.4 (CVE-2022-37601).