normalize-url - Denial of Service high vulnerability

[kbagnall]

Versions

• nuxt: 2.15.6
• node: 14.17

Reproduction

npm install we're prompted with High vulnerability of normalize-url Nuxt dependency.
npm list | grap shows us that Nuxt 2.15.6 - @nuxt/webpack@2.15.6 is dependent on normalize-url@3.0.0 and needs to be upgraded to 6.0.1

Steps to reproduce

npm install

https://snyk.io/vuln/SNYK-JS-NORMALIZEURL-1296539

What is Expected?

no high vulnerabilities

What is actually happening?

high vulnerabilities for normalise-url

[danielroe]

@kbagnall I've updated #9284 - hope this helps 🙃