Hey @doraig the function that vulnerability is referring to is not used by us. And upgrading the lib means we loose support for node 11. Therefore we are not doing it.