V4 postcss vulnerability

[jeran-urban]

hello,

the postcss package has vulnerabilities below version 8.4.31, is there anyway that you can update the dependency for postcss from ^7.0.35 to ^8.4.31 and backport that to create a v 4.0.1? Any help would be much appreciated. Thank you.

[jeran-urban]

current workaround in package.json:

"overrides": {
    "resolve-url-loader":{
      "postcss": "^8.4.31"
    }
  }

[mdmahendri]

found this issue through the usage of react-scripts
the number of vulnerabilities goes up out of nowhere and it looks like Create React App is abbandoned