[CVE-2022-37601](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37601) can be fixed by updating the package `loader-utils` to version 3.0.0