title: how to fix vue-cli-service vulnerability?
body: <p>I just tried creating a new project with <code>@vue/cli 4.3.1</code>, fresh install of Ubuntu 19.10, <code>npm 6.14.4</code>. When I <code>cd</code> into the project and run <code>npm install</code>, I get the following:</p>
  
  <pre><code>found 1 high severity vulnerability
    run `npm audit fix` to fix them, or `npm audit` for details
  </code></pre>
  
  <p>Running <code>npm audit fix</code> produces</p>
  
  <pre><code>fixed 0 of 1 vulnerability in 1285 scanned packages
    1 vulnerability required manual review and could not be updated
  </code></pre>
  
  <p>Upon running <code>npm audit</code>, I get</p>
  
  <pre><code>┌───────────────┬──────────────────────────────────────────────────────────────┐
  │ High          │ Denial of Service                                            │
  ├───────────────┼──────────────────────────────────────────────────────────────┤
  │ Package       │ http-proxy                                                   │
  ├───────────────┼──────────────────────────────────────────────────────────────┤
  │ Patched in    │ No patch available                                           │
  ├───────────────┼──────────────────────────────────────────────────────────────┤
  │ Dependency of │ @vue/cli-service [dev]                                       │
  ├───────────────┼──────────────────────────────────────────────────────────────┤
  │ Path          │ @vue/cli-service &gt; webpack-dev-server &gt;                      │
  │               │ http-proxy-middleware &gt; http-proxy                           │
  ├───────────────┼──────────────────────────────────────────────────────────────┤
  │ More info     │ https://npmjs.com/advisories/1486                            │
  └───────────────┴──────────────────────────────────────────────────────────────┘
  </code></pre>
  
  <p>Is this expected? Normal? Possible to fix? It worries me that this happens with such a clean environment where nothing malicious was installed, but then I'm also not an npm expert... What should I do here?</p>