High Denial of Service
Package css-what
Patched in >=5.0.1
Dependency of gulp-svgstore [dev]
Path gulp-svgstore > cheerio > css-select > css-what
More info https://npmjs.com/advisories/1754
Proposed fix
Upgrade the dependency on css-select to be ^4.1.3 since 4.1.3 bumps their dependency on css-what to 5.0.1 and fixes this issue.
When using gulp-svgstore@7.0.1 npm audit reports:
Proposed fix Upgrade the dependency on css-select to be ^4.1.3 since 4.1.3 bumps their dependency on css-what to 5.0.1 and fixes this issue.