Command
new
Is this a regression?
The previous version in which this bug was not present was
No response
Description
Running npm audit on Angular v16 project causes an error output, because @angular-devkit/build-angular depends on vulnerable version of webpack-dev-middleware.
See more details: GHSA-wr3j-pwj9-hqq6
Minimal Reproduction
Create new Angular v16 project.
Run npm audit in the project folder
Exception or Error
No response
Your Environment
Angular CLI: 16.2.10
Node: 18.18.1
Package Manager: npm 10.2.0
OS: win32 x64
Angular: 16.2.12
... animations, cdk, common, compiler, compiler-cli, core, forms
... language-service, platform-browser, platform-browser-dynamic
... router
Package Version
---------------------------------------------------------
@angular-devkit/architect 0.1602.10
@angular-devkit/build-angular 16.2.12
@angular-devkit/core 16.2.10
@angular-devkit/schematics 16.2.10
@angular/cli 16.2.10
@schematics/angular 16.2.10
rxjs 7.8.1
typescript 4.9.5
zone.js 0.13.3
Anything else relevant?
No response
Command
new
Is this a regression?
The previous version in which this bug was not present was
No response
Description
Running npm audit on Angular v16 project causes an error output, because @angular-devkit/build-angular depends on vulnerable version of webpack-dev-middleware.
See more details: GHSA-wr3j-pwj9-hqq6
Minimal Reproduction
Create new Angular v16 project.
Run npm audit in the project folder
Exception or Error
No response
Your Environment
Anything else relevant?
No response