loader-utils stable version is 3.2.1 which has dependency on JSON5 2.2.1 which has Published Vulnerabilities CVE-2022-46175 (OSSINDEX) about loader-utils

[a-elcesar]

i am using loader-utils version 2.0.4 on my project and encounter the same issue. i hope there would be a fix on version 2.0.4 as well.

[beetlegius]

i am using loader-utils version 2.0.4 on my project and encounter the same issue. i hope there would be a fix on version 2.0.4 as well.

+1

[alexander-akait]

Sorry, we don't have JSON5 in dependecies https://github.com/webpack/loader-utils/blob/master/package.json#L6, only v2 or v1, but you can solve this using rm -rf node_modules && npm i so your transitive deps will be bumped

[alexander-akait]

I want to close this issue, because it is already solved, anyway if you think we can do more feel free to ping me here