eslint-utils - critical security vulnerability

[samuelneff]

Describe the bug Cloned react-slingshot and ran npm i with Node 12 and NPM 6. It reported a critical security vulnerability.

To Reproduce Steps to reproduce the behavior:

1. Clone
2. npm i
3. npm audit

Expected behavior Should not be any security vulnerabilities

Screenshots

/c/projects/react-slingshot (issue-625-period-404-fix)$ npm audit

                       === npm audit security report ===

# Run  npm update eslint-utils --depth 2  to resolve 1 vulnerability

  Critical        Arbitrary Code Execution
  Package         eslint-utils
  Dependency of   eslint [dev]
  Path            eslint > eslint-utils
  More info       https://npmjs.com/advisories/1118

found 1 critical severity vulnerability in 1771232 scanned packages
  run `npm audit fix` to fix 1 of them.

Desktop (please complete the following information):

• OS: win10
• Browser n.a.
• Version n.a.

Additional context master head is at 207d66ed689642a50d9891cea86d63d8429f79ad Last commit in git log shows Aug 1.