title: npx create-react-app running with old version
body: <p>The latest version <code>create-react-app</code> is <code>4.0.3</code> but when I run <code>npx create-react-app my-app</code> it uses version 1.5.2 and also doesn't run with templates. I don't have any global installation of it and have tried uninstalling it using <code>npm uninstall -g create-react-app</code>.</p>
  <p>My npm version is 7.21.1 and node version is 16.9.1</p>
  <p>How can I make it work? Please help.</p>
  <p>EDIT: There are 58 vulnerabilities while creating the app and this comes at the end -</p>
  <pre><code>A template was not provided. This is likely because you're using an outdated version of create-react-app.
  Please note that global installs of create-react-app are no longer supported.
  You can fix this by running npm uninstall -g create-react-app or yarn global remove create-react-app before using create-react-app again.
  </code></pre>
  <p>The folder also doesn't have the <code>src</code> folder just the <code>node_modules</code> folder and <code>package.json</code> file.</p>
  <p>While running <code>npm audit fix</code> I get this -</p>
  <pre><code>tar  &lt;=4.4.17
  Severity: high
  Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization - https://github.com/advisories/GHSA-5955-9wpr-37jh
  Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links - https://github.com/advisories/GHSA-9r2w-394v-53qc
  Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization - https://github.com/advisories/GHSA-3jfq-g458-7qm9
  Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning - https://github.com/advisories/GHSA-r628-mhmh-qjhw
  fix available via `npm audit fix`
  node_modules/tar
    tar-pack  *
    Depends on vulnerable versions of tar
    node_modules/tar-pack
      create-react-app  &gt;=1.3.0-alpha.58689133
      Depends on vulnerable versions of tar-pack
      node_modules/create-react-app
  
  3 high severity vulnerabilities
  </code></pre>