@angular-devkit/build-angular depends on vulnerable version of webpack-dev-middleware #27334
Description
Command
new
Is this a regression?
- Yes, this behavior used to work in the previous version
The previous version in which this bug was not present was
No response
Description
Running npm audit on Angular v16 project causes an error output, because @angular-devkit/build-angular depends on vulnerable version of webpack-dev-middleware.
See more details: GHSA-wr3j-pwj9-hqq6
Minimal Reproduction
Create new Angular v16 project.
Run npm audit in the project folder
Exception or Error
No response
Your Environment
Angular CLI: 16.2.10
Node: 18.18.1
Package Manager: npm 10.2.0
OS: win32 x64
Angular: 16.2.12
... animations, cdk, common, compiler, compiler-cli, core, forms
... language-service, platform-browser, platform-browser-dynamic
... router
Package Version
---------------------------------------------------------
@angular-devkit/architect 0.1602.10
@angular-devkit/build-angular 16.2.12
@angular-devkit/core 16.2.10
@angular-devkit/schematics 16.2.10
@angular/cli 16.2.10
@schematics/angular 16.2.10
rxjs 7.8.1
typescript 4.9.5
zone.js 0.13.3
Anything else relevant?
No response