[security] Fix json5 to fix CVE-2022-46175 vulnerability

[idanrozin]

Hello there, there is a new npm vulnerability which needs to be fix ASAP.

Suggested solution: Bump css-loader to version >= 6

The vulnerability is in json5 library which is used in loader-utils package which is being used by previous versions of css-loader which your library is using. I think that this can be fixed by bumping the version of css-loader to version 6 and above, because v6 is not using loader-utils (the vulnerable library) at all!
Thank you in advance :)

[idanrozin]

Closing this as it seems that the issue has been fix from the JSON5 end.
json5/json5#298
github/advisory-database#1541