We always keep up-to-date our dependencies to reduce the risk of having a dependency with a vulnerability.

Contact [email protected] to let us know about your findings and see what are the next steps.