Karma: Karma v5.2.3 has dependency on library with known vulnerability

[ondrejmartinak]

I have been going through security review for up-taking the Karma v5.2.3 and noticed the dependency on library that has been patched in v5.2.2 (ua-parser-js 0.7.21 ) is still vulnerable with the same issue ua-parser-js 0.7.22.

Not sure if you are aware of recently released version 0.7.23, but just want to bring it to your attention.

Please see the detail
https://snyk.io/vuln/SNYK-JS-UAPARSERJS-1023599

[devoto13]

Thanks for the report. This has already been fixed in master and will be included in the next release.

[talsi]

@devoto13
hi,
when will the next release be available?