Symfony version(s) affected

7.2.3

Description

Hi team,

I'm using retire.js to scan for vulnerabilities in my project and it reports thatvendor/symfony/web-profiler-bundle/Resources/views/Script/Mermaid/mermaid-flowchart-v2.min.js includesDOMPurify 3.0.9 which in turn has known vulnerabilities.

I know that web-profiler-bundle is only in dev, but I run theretire command in dev, and the client wants to see it report no vulnerabilities in my project.

Any chance of updating web-profiler-bundle to use a more recent version of Mermaid? Thanks

How to reproduce

1. Create a new Symfony project
2. Install retire.js withnpm install -g retire
3. Runretire

Possible Solution

No response

Additional Context

No response