[Security] Critical Warnings on react-dev-utils that depends on immer

[coderwurst]

Describe the bug

I noticed from our pipeline that a critical vulnerability has been raised stemming from immer not on at least version 9.0.6.

Steps to reproduce the behavior

1. Run OWASP Checks

Screenshots

NPM-1067715 Fix from 9.0.6

NPM-1067720Fix from 9.0.6

NPM-1068264 Fix from 8.0.1

Result of npm list immer

─┬ @types/[email protected]
│ └─┬ @storybook/[email protected]
│   └─┬ [email protected]
│     └── [email protected]

Additional context

Updating to @storybook/react to v6.4.13 should solve this issue. Are there any plans to update this package, or any known reasons not to update to the next major version?