path-to-regexp <0.1.10 high severity vulnerability

[puremana]

• Laravel Mix Version: 6.0.49 (latest version)

Description:

Laravel Mix Version 6.0.49 uses Express version 4.17.1 which uses path-to-regexp version 0.1.7. This has a high-severity vulnerability. See GHSA-9wv6-86v2-598j

Steps To Reproduce:

npm audit

Recommended Fix

Update the Express dependency to the latest version when they make the next release. They have just fixed this in the past 50 minutes so I don't think there is a release out for it currently.

https://github.com/expressjs/express/releases
Their fix: expressjs/express#5902