[CVE-2020-7753] Update remark to 13.0.0 #1706
Description
I was tasked with resolving a vulnerability coming from trim package. Dependency chain is as follows: trim <- remark-parse <- remark <- react-styleguidist<- our repo.
remark-parse in version 9.0.0 removes the trim completely, and to have remark-parse in 9.0.0, we need to bump the remark to 13.0.0.
Unfortunately, react-styleguidist fixes the remark to ^11.0.1.
Because of the fact that trim's vulnerable code won't be used anyway in modern browsers, I've managed to reduce the vulnerability from high to low, but it would be better if we could get rid of trim altogether - hence I'm opening an issue on your side.