title: npm upgrade and npm audit fix: problems with vulnerabilities (upgrading react-scripts)
body: <p>If I run <code>npm upgrade</code> or <code>npm upgrade react-scripts</code> I've always got the message like</p>
  <pre><code>added 84 packages, removed 249 packages, changed 428 packages, and audited 1245 packages in 57s
  
  179 packages are looking for funding
    run `npm fund` for details
  
  6 moderate severity vulnerabilities
  
  To address all issues (including breaking changes), run:
    npm audit fix --force
  
  Run `npm audit` for details.
  </code></pre>
  <p>So I try <code>npm audit fix --force</code> and get a long report about dependencies and the text</p>
  <pre><code>66 vulnerabilities (15 low, 26 moderate, 24 high, 1 critical)
  
  To address issues that do not require attention, run:
    npm audit fix
  
  To address all issues (including breaking changes), run:
    npm audit fix --force
  </code></pre>
  <p>I follow these steps and run <code>npm audit fix --force</code> witch caused into errors:</p>
  <pre><code>npm ERR! code ERR_INVALID_ARG_TYPE
  npm ERR! The &quot;from&quot; argument must be of type string. Received undefined
  
  npm ERR! A complete log of this run can be found in:
  npm ERR!     C:\Users\{user}\AppData\Local\npm-cache\_logs\2022-05-09T15_11_33_120Z-debug-0.log
  </code></pre>
  <p>If I try to run <code>npm audit fix --force</code> instead of <code>npm audit fix</code> I'm get the following:</p>
  <pre><code>nth-check  &lt;2.0.1
  Severity: moderate
  Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
  fix available via `npm audit fix --force`
  Will install react-scripts@2.1.3, which is a breaking change
  node_modules/svgo/node_modules/nth-check
    css-select  &lt;=3.1.0
    Depends on vulnerable versions of nth-check
    node_modules/svgo/node_modules/css-select
      svgo  1.0.0 - 1.3.2
      Depends on vulnerable versions of css-select
      node_modules/svgo
        @svgr/plugin-svgo  &lt;=5.5.0
        Depends on vulnerable versions of svgo
        node_modules/@svgr/plugin-svgo
          @svgr/webpack  4.0.0 - 5.5.0
          Depends on vulnerable versions of @svgr/plugin-svgo
          node_modules/@svgr/webpack
            react-scripts  &gt;=2.1.4
            Depends on vulnerable versions of @svgr/webpack
            node_modules/react-scripts
  
  6 moderate severity vulnerabilities
  
  To address all issues (including breaking changes), run:
    npm audit fix --force
  </code></pre>
  <p>And no, running <code>npm audit fix --force</code> once again does not help.</p>
  <p>Can somebody help me?</p>