fontmin-webpack brings an insecure version of glob-parent

[Rudloff]

fontmin-webpack@4.0.0 requires glob-parent@^3.1.0 via a transitive dependency on glob-stream@6.1.0

This version is vulnerable to GHSA-ww39-953v-wcq6.

[kosmeln]

We are experiencing the same issue. Any chance to resolve this?

[kosmeln]

Any updates here? This vulnerability is marked as "severe" and it has been month since this issue was posted. Did anybody find a workaround?