Cypress 9.0.0 unusable, npm audit: 5 moderate severity vulnerabilities

[jeff00seattle]

Current behavior

Post npm install of latest cypress 9.0.0, npm audit reports 5 moderate severity vulnerabilities.

$ node --version                                                              
v16.5.0
$ npm --version                                                                         
7.19.1
$ npm audit
# npm audit report

json-schema  <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix --force`
Will install cypress@4.2.0, which is a breaking change
node_modules/json-schema
  jsprim  0.3.0 - 2.0.1
  Depends on vulnerable versions of json-schema
  node_modules/jsprim
    http-signature  1.0.0 - 1.3.5
    Depends on vulnerable versions of jsprim
    node_modules/http-signature
      @cypress/request  *
      Depends on vulnerable versions of http-signature
      node_modules/@cypress/request
        cypress  >=4.3.0
        Depends on vulnerable versions of @cypress/request
        node_modules/cypress

5 moderate severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

Desired behavior

npm audit showing No vulnerabilities from cypress 9.0.0.

Test code to reproduce

$ node --version                                                              
v16.5.0
$ npm --version                                                                         
7.19.1
$ npm audit

Cypress Version

9.0.0

Other

No response

[cypress-bot]

The code for this is done in cypress-io/cypress#19099, but has yet to be released.
We'll update this issue and reference the changelog when it's released.

[cypress-bot]

Released in 9.1.1.

This comment thread has been locked. If you are still experiencing this issue after upgrading to
Cypress v9.1.1, please open a new issue.