Github warning: We found a potential security vulnerability in one of your dependencies

[shivahr]

Following is the information given in Github warning:

We found a potential security vulnerability in one of your dependencies.

A dependency defined in IonicMobileApp/package-lock.json has known security vulnerabilities and should be updated.

Dependencies defined in IonicMobileApp/package-lock.json 500
hapijs / hoek Known security vulnerability in 4.2.0

Known vulnerability found

• CVE-2018-3728 Moderate severity
  hoek node module before 5.0.3 or 4.2.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via...
• package-lock.json update suggested:
  hoek ~> 4.2.1
  Always verify the validity and compatibility of suggestions with your codebase.

[shivahr]

Related issues:

• Security issue in dependencies  ionic-team/ionic-app-scripts#1425
• Security issue in dependencies sass/node-sass#2355
• Vulnerability in hoek package request/request#2926

[shivahr]

$ npm ls hoek
[email protected]
├─┬ @angular/[email protected]
│ └─┬ [email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └─┬ [email protected]
│         ├─┬ [email protected]
│         │ └── [email protected]  deduped
│         ├── [email protected] 
│         └─┬ [email protected]
│           └── [email protected]  deduped
├─┬ @ionic/[email protected]
│ └─┬ [email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       ├─┬ [email protected]
│       │ └── [email protected]  deduped
│       ├─┬ [email protected]
│       │ └─┬ [email protected]
│       │   └── [email protected]  deduped
│       ├── [email protected] 
│       └─┬ [email protected]
│         └── [email protected]  deduped
└─┬ [email protected]
  └─┬ [email protected]
    └─┬ [email protected]
      ├─┬ [email protected]
      │ └── [email protected]  deduped
      ├── [email protected] 
      └─┬ [email protected]
        └── [email protected]  deduped

The vulnerable dependency [email protected] is through @ionic/[email protected]

[CyberBLN]

ionic-team/ionic-app-scripts#1493 will fix this