Additionally, the npm audit report is not very happy:
# npm audit report
async <3.2.2
Severity: high
Prototype Pollution in async - https://github.com/advisories/GHSA-fwr7-v2mv-hh25
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/async
jake >=8.0.1
Depends on vulnerable versions of async
node_modules/jake
ejs >=3.1.2
Depends on vulnerable versions of jake
node_modules/ejs
vite-plugin-html >=1.0.0-beta.1
Depends on vulnerable versions of ejs
node_modules/vite-plugin-html
4 high severity vulnerabilities
To address all issues (including breaking changes), run:
npm audit fix --force
An update of all dependencies fixes this issue.