title: uglifyjs-webpack-plugin security vulnerability
body: <p>I'm getting a security vulnerability on uglifyjs-webpack-plugin package</p>
  
  <pre><code>  Moderate        Cross-Site Scripting
  
    Package         serialize-javascript
  
    Patched in      &gt;=2.1.1
  
    Dependency of   uglifyjs-webpack-plugin [dev]
  
    Path            uglifyjs-webpack-plugin &gt; serialize-javascript
  
    More info       https://npmjs.com/advisories/1426
  </code></pre>
  
  <p>All the fixes I've come accrss suggest upgrading <code>serialize-javascript</code> to latest, but since I'm not using it  directly, I'm not sure what to do here. Any ideas?</p>
  
  <p>I'm using this version <code>"uglifyjs-webpack-plugin": "^2.2.0"</code></p>