Critical threat - CVE-2023-28154

[leNicDev]

v15.0.0 seems to be affected by CVE-2023-28154. It allows arbitrary code execution during build time using Webpack magic comments:

webpack/webpack#16500 (comment)

To fix this, webpack should be updated to >=5.76.0.

[arturovt]

We don't have webpack as a dependency, it's a dependency of the Angular CLI and should be updated there. We only provide a layer over the Angular CLI, but it's using its own dependencies. Please consider moving the issue to their repository.