yarn audit: security vulnerability detected in storybook 6.1.18 -> immer

[binary64]

Describe the bug
immer, used by many of your packages, has had a new Prototype Pollution vulnerability detected: https://www.npmjs.com/advisories/1603 which is patched upstream in >=8.0.1

To Reproduce
yarn install @storybook/react && yarn audit

Expected behavior
revved to secure version

[claezon]

Also reported in create-react-app.

While we wait, this may be a temporary solution:
https://github.com/rogeriochaves/npm-force-resolutions

[peterkimga]

This is related to this: ianstormtaylor/slate#4050

And I also have that problem in Storybook

And suggested the temporary solution is actually not working when used as a module.

[jgoyer]

Fixed in create-react-app

[shilman]

Ooh-la-la!! I just released https://github.com/storybookjs/storybook/releases/tag/v6.2.0-beta.1 containing PR #14015 that references this issue. Upgrade today to the @next NPM tag to try it out!

npx sb upgrade --prerelease

Closing this issue. Please re-open if you think there's still more to do.

[shilman]

Boo-yah!! I just released https://github.com/storybookjs/storybook/releases/tag/v6.1.20 containing PR #14015 that references this issue. Upgrade today to the @latest NPM tag to try it out!

npx sb upgrade