[BUG] Snyk vulnerability in version asyncapi/generator 2.5.0

[Divya-hub-dot]

Describe the bug.

A critical vulnerability has been reported for the package jsonpath-plus, which originates from @asyncapi/generator@1.15.1.
To address this, we have upgraded @asyncapi/generator to versions 2.4.0 and even tested with the latest version 2.5.0. However, the issue persists along the following dependency path:

lib@* › @asyncapi/generator@2.4.0 › @asyncapi/parser@3.0.0-next-major-spec.8 › jsonpath-plus@7.2.0

To resolve this, jsonpath-plus needs to be upgraded to version 10.2.0, but unfortunately, we are not able to do it, so could you please help us to upgrade jsonpath-plus to 10.2.0 or can you guide how it can be done..

Expected behavior

Snyk vulnerabilities should not appear on the snyk board under below mentioned path:

How to Reproduce

1. As suggested in SNYK org, I have upgraded @asyncapi/generator to versions 2.4.0 but still snyk vuln was showing up
2. I then upgraded to 2.5.0 which is the latest version of @asyncapi/generator
3. but still Vul is showing up in SNYK org and it is suggesting upgrading jsonpath-plus to 10.2.0
4. so need help/suggestion on upgrading jsonpath-plus to 10.2.0

🥦 Browser

None

👀 Have you checked for similar open issues?

• I checked and didn't find similar issue

🏢 Have you read the Contributing Guidelines?

• I have read the Contributing Guidelines

Are you willing to work on this issue ?

None

[github-actions]

Welcome to AsyncAPI. Thanks a lot for reporting your first issue. Please check out our contributors guide and the instructions about a basic recommended setup useful for opening a pull request.
Keep in mind there are also other channels you can use to interact with AsyncAPI community. For more details check out this issue.

[derberg]

thanks for the issue, not a fix we should do in generator, only as last resort, lets first try in asyncapi/parser-js#1065 (comment)

[asos-pareshjadhav]

Hi @derberg
asyncapi/generator & asyncapi/parser-js** both are same ??

[derberg]

@asos-pareshjadhav in what sense? I don't get your question, need more context