grunt-yellowlabtools (>=1.1.3, <=1.2.0), yellowlabtools (>=1.10.0, <=1.12.3) potentially affected by CVE-2022-25906 via is-http2 (>=1.0.4, <=1.1.0)

is-http2 NPM version =1.0.4, =1.1.3, =1.10.0, =1.12.3 Source cves: CVE-2022-25906 Source advisory: OSV:GHSA-2275-RPF5-XV8H...