@angular-devkit/build-angular dependency resolve-url-loader@3.1.2 uses postcss@7.0.21 which has npm vulnerability 1693

[ap-buf]

└─┬ @angular-devkit/build-angular@0.1102.12
├─┬ css-loader@5.0.1
│ └── postcss@8.2.13 deduped
├── postcss@8.2.13
└─┬ resolve-url-loader@3.1.2
└── postcss@7.0.21

https://www.npmjs.com/advisories/1693

[alan-agius4]

Closed via #20737

[synga]

Does this solve the problem in older Angular versions? V9 also has the same problem.

[alan-agius4]

Does this solve the problem in older Angular versions? V9 also has the same problem.

This fix cannot be back-ported to version 10 and 9. These versions still depend on postcss 7. Changing that would be a major change.