[Bug]: Npm audit 6 high severity vulnerabilities

[DusanLuketic]

Describe the bug / 问题描述

npm audit report

rollup <2.79.2
Severity: high
DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS - GHSA-gcx4-mw62-g8wm
fix available via npm audit fix --force
Will install @ant-design/charts@1.4.3, which is a breaking change
node_modules/fmin/node_modules/rollup
fmin <=0.0.2
Depends on vulnerable versions of rollup
node_modules/fmin
@antv/g2 >=5.0.12
Depends on vulnerable versions of fmin
node_modules/@antv/g2
@ant-design/plots >=2.0.0-alpha.0
Depends on vulnerable versions of @antv/g2
Depends on vulnerable versions of @antv/g2-extension-plot
node_modules/@ant-design/plots
@ant-design/charts >=2.0.0-alpha.0
Depends on vulnerable versions of @ant-design/plots
node_modules/@ant-design/charts
@antv/g2-extension-plot *
Depends on vulnerable versions of @antv/g2
node_modules/@antv/g2-extension-plot

6 high severity vulnerabilities

Reproduction link / 复现链接

No response

Steps to Reproduce the Bug or Issue / 重现步骤

No response

Version / 版本

🆕 2.x

OS / 操作系统

• macOS
• Windows
• Linux
• Others / 其他

Browser / 浏览器

• Chrome
• Edge
• Firefox
• Safari (Limited support / 有限支持)
• IE (Nonsupport / 不支持)
• Others / 其他