Vulnerability on react-scripts 4.0.3

[BiancaArtola]

I am using react-scripts 4.0.3 on my project and the dependabot of GitHub found the following vuln:

Dependabot cannot update is-svg to a non-vulnerable version
The latest possible version that can be installed is 3.0.0 because of the following conflicting dependency:

react-scripts@4.0.3 requires is-svg@^3.0.0 via a transitive dependency on postcss-svgo@4.0.2
The earliest fixed version is 4.2.2.

View logs or learn more about troubleshooting Dependabot errors.

Are you going to fix that?

[matteofigus]

Duplicate of #10762

[cmacdonnacha]

Hey, any idea when this will be addressed?

[gaearon]

There is no vulnerability here, so it will not be addressed.
#11174