Hi everyone, I'm pretty new to working with React and managing dependencies, and I could really use some guidance on how to fix some vulnerabilities that have popped up in my project. When I run npm audit, I get the following vulnerabilities:

1. nth-check <2.0.1
2. High severity: Inefficient Regular Expression Complexity in nth-check.
3. It's used by u/svgr/webpack, which is part of react-scripts.
4. PostCSS <8.4.31
5. Moderate severity: PostCSS line return parsing error.
6. It's used by resolve-url-loader, which is also part of react-scripts.

What I've Tried So Far:

• I ran npm audit fix, but the issues persist.
• I also tried npm audit fix --force, but it suggests installing react-scripts@3.0.1, which seems like a breaking change.
• I have tried looking for posts on stack overflow but im not making any progress.

Questions:

• Is updating react-scripts to version 3.0.1 a safe solution, or will it cause more issues due to the breaking changes?
• Should I try to manually update the vulnerable packages like nth-check and postcss? If so, how do I go about it without breaking other dependencies?
• Am I missing something crucial when using npm audit fix --force? I have tried this and do understand that I shouldnt use this tool haphazardly.
• Any advice on how to handle these vulnerabilities without causing other issues in my project would be greatly appreciated!

I have tried to look for dependancy mismatches using npx expo doctor, npx expo install --check and asking chat gpt.

Thanks in advance for your help!