Update vulnerable dependency