node -v): v14.16.0npm -v): v6.14.11[email protected] requires is-svg@^3.0.0 via a transitive dependency on [email protected]
Same issue in [email protected] which also seems to be affected by CVE-2021-27290.
This is due to our dependency of cssnano. I believe the only resolution right now is to use yarn + yarn resolutions to fix this. They have not released (and appears will not release) a fix in a non-major version.
It is also discuted here. It seems there is a 5.0.0-rc.2 version, but it needs to be specified/forced because latest stable release on NPM is currently 4.1.10
this issue fixed in [email protected] you should update your dependencies
I sent in a PR for this one: https://github.com/JeffreyWay/laravel-mix/pull/2944
Most helpful comment
This is due to our dependency of cssnano. I believe the only resolution right now is to use yarn + yarn resolutions to fix this. They have not released (and appears will not release) a fix in a non-major version.