yargs-parser in yargs is out of date and has a low vulnerability

[ahmed-gl]

• Operating System: Windows 10
• Node Version: v12.14.1
• NPM Version: 6.1.0
• webpack Version:
• webpack-dev-server Version: 3.11.0
• Browser:

• This is a bug
• [x ] This is a modification request

Code

// webpack.config.js

// additional code, remove if not needed.

Expected Behavior

Yargs should use the latest version without the security flaw Patched in >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2

Actual Behavior

Yargs uses version 18.1.1

For Bugs; How can we reproduce the behavior?

npm audit

For Features; What is the motivation and/or use-case for the feature? security update

[alexander-akait]

Looks you do not use latest version, update your version, we already fixed it https://github.com/webpack/webpack-dev-server/blob/master/package.json#L71

[ahmed-gl]

thanks!